2_ds_apache_apache_subversion.md

June 14, 2023 · View on GitHub

Use-CaseEvent Types/ParsersMITRE ATT&CK® TTPContent
Compromised Credentialsapp-activity
s-svn-app-activity-3
s-svn-app-activity-2
s-svn-app-activity
s-svn-app-activity-5
s-svn-app-activity-4
s-svn-app-activity-1
s-svn-app-activity-7
s-svn-app-activity-6
s-svn-app-activity-8
T1078 - Valid Accounts
T1133 - External Remote Services
  • 39 Rules
  • 24 Models
Data Accessapp-activity
s-svn-app-activity-3
s-svn-app-activity-2
s-svn-app-activity
s-svn-app-activity-5
s-svn-app-activity-4
s-svn-app-activity-1
s-svn-app-activity-7
s-svn-app-activity-6
s-svn-app-activity-8
T1078 - Valid Accounts
  • 19 Rules
  • 11 Models
Data Leakapp-activity
s-svn-app-activity-3
s-svn-app-activity-2
s-svn-app-activity
s-svn-app-activity-5
s-svn-app-activity-4
s-svn-app-activity-1
s-svn-app-activity-7
s-svn-app-activity-6
s-svn-app-activity-8
T1114.003 - Email Collection: Email Forwarding Rule
  • 3 Rules
Lateral Movementapp-activity
s-svn-app-activity-3
s-svn-app-activity-2
s-svn-app-activity
s-svn-app-activity-5
s-svn-app-activity-4
s-svn-app-activity-1
s-svn-app-activity-7
s-svn-app-activity-6
s-svn-app-activity-8

app-activity-failed
s-svn-app-activity-3
s-svn-app-activity-2
s-svn-app-activity
s-svn-app-activity-5
s-svn-app-activity-4
s-svn-app-activity-1
s-svn-app-activity-7
s-svn-app-activity-6
s-svn-app-activity-8
T1078 - Valid Accounts
T1090.003 - Proxy: Multi-hop Proxy
  • 2 Rules
Malwareapp-activity
s-svn-app-activity-3
s-svn-app-activity-2
s-svn-app-activity
s-svn-app-activity-5
s-svn-app-activity-4
s-svn-app-activity-1
s-svn-app-activity-7
s-svn-app-activity-6
s-svn-app-activity-8
T1078 - Valid Accounts
  • 1 Rules
Privilege Abuseapp-activity
s-svn-app-activity-3
s-svn-app-activity-2
s-svn-app-activity
s-svn-app-activity-5
s-svn-app-activity-4
s-svn-app-activity-1
s-svn-app-activity-7
s-svn-app-activity-6
s-svn-app-activity-8

app-activity-failed
s-svn-app-activity-3
s-svn-app-activity-2
s-svn-app-activity
s-svn-app-activity-5
s-svn-app-activity-4
s-svn-app-activity-1
s-svn-app-activity-7
s-svn-app-activity-6
s-svn-app-activity-8
T1078 - Valid Accounts
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions
  • 6 Rules
  • 2 Models
Privilege Escalationapp-activity
s-svn-app-activity-3
s-svn-app-activity-2
s-svn-app-activity
s-svn-app-activity-5
s-svn-app-activity-4
s-svn-app-activity-1
s-svn-app-activity-7
s-svn-app-activity-6
s-svn-app-activity-8
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions
  • 3 Rules
  • 1 Models
Privileged Activityapp-activity
s-svn-app-activity-3
s-svn-app-activity-2
s-svn-app-activity
s-svn-app-activity-5
s-svn-app-activity-4
s-svn-app-activity-1
s-svn-app-activity-7
s-svn-app-activity-6
s-svn-app-activity-8

app-activity-failed
s-svn-app-activity-3
s-svn-app-activity-2
s-svn-app-activity
s-svn-app-activity-5
s-svn-app-activity-4
s-svn-app-activity-1
s-svn-app-activity-7
s-svn-app-activity-6
s-svn-app-activity-8
T1078 - Valid Accounts
  • 2 Rules
  • 1 Models
Ransomwareapp-activity
s-svn-app-activity-3
s-svn-app-activity-2
s-svn-app-activity
s-svn-app-activity-5
s-svn-app-activity-4
s-svn-app-activity-1
s-svn-app-activity-7
s-svn-app-activity-6
s-svn-app-activity-8

app-activity-failed
s-svn-app-activity-3
s-svn-app-activity-2
s-svn-app-activity
s-svn-app-activity-5
s-svn-app-activity-4
s-svn-app-activity-1
s-svn-app-activity-7
s-svn-app-activity-6
s-svn-app-activity-8
T1078 - Valid Accounts
  • 2 Rules