| Use-Case | Activity Type (Legacy Event Type)/Parsers | MITRE ATT&CK® TTP | Content |
|---|---|---|---|
| Privileged Activity | physical_location-access:fail (failed-physical-access) ↳xplan-x-csv-physical-location-access-fail-cardexpired ↳xplan-x-csv-physical-location-access-fail-accessdenied ↳xplan-x-csv-physical-location-access-fail-passbackattemped ↳xplan-x-csv-physical-location-access-fail-cardresend physical_location-access:success (physical-access) ↳xplan-x-csv-physical-location-access-success-accessgranted ↳xplan-x-csv-physical-location-access-success-controlrelinquished |
T1078 - Valid Accounts |
|