Product: Xerox
Use-Case: Data Leak
| Rules | Models | MITRE ATT&CK® TTPs | Activity Types | Parsers |
|---|---|---|---|---|
| 4 | 2 | 1 | 1 | 0 |
| Event Type | Rules | Models |
|---|---|---|
| print-activity | T1052 - Exfiltration Over Physical Medium ↳ PR-UP-F: First print activity from printer for user ↳ PR-UP-A: Abnormal printer for user ↳ PR-UT-TOW: Abnormal print activity time for user ↳ PR-SRC-CODE: Printed document with source code file extension |
• PR-UT-TOW: Print activity time for user • PR-UP: Printers for user |