Vendor: McAfee

June 14, 2023 · View on GitHub

Product: McAfee Web Gateway

RulesModelsMITRE ATT&CK® TTPsEvent TypesParsers
81281522
Use-CaseEvent Types/ParsersMITRE ATT&CK® TTPContent
Abnormal Authentication & Accessweb-activity-allowed
leef-mwg-proxy
s-mwg-web-activity
n-mwg-proxy
mwg-proxy-1
mwg-proxy-2
json-mwg-web-activity
mwg-proxy-3
s-mwg-proxy-3-denied
cef-mwg-proxy
s-mwg-proxy-1

web-activity-denied
leef-mwg-proxy
s-mwg-web-activity
s-mwg-proxy-3
s-mwg-proxy
n-mwg-proxy
mwg-proxy-1
mwg-proxy-2
json-mwg-web-activity
mwg-proxy-3
cef-mwg-proxy
s-mwg-proxy-1
T1071.001 - Application Layer Protocol: Web Protocols
  • 6 Rules
  • 6 Models
Compromised Credentialsweb-activity-allowed
leef-mwg-proxy
s-mwg-web-activity
n-mwg-proxy
mwg-proxy-1
mwg-proxy-2
json-mwg-web-activity
mwg-proxy-3
s-mwg-proxy-3-denied
cef-mwg-proxy
s-mwg-proxy-1

web-activity-denied
leef-mwg-proxy
s-mwg-web-activity
s-mwg-proxy-3
s-mwg-proxy
n-mwg-proxy
mwg-proxy-1
mwg-proxy-2
json-mwg-web-activity
mwg-proxy-3
cef-mwg-proxy
s-mwg-proxy-1
T1071.001 - Application Layer Protocol: Web Protocols
T1078 - Valid Accounts
T1102 - Web Service
T1189 - Drive-by Compromise
T1190 - Exploit Public Fasing Application
T1204.001 - T1204.001
T1566.002 - Phishing: Spearphishing Link
T1568.002 - Dynamic Resolution: Domain Generation Algorithms
  • 42 Rules
  • 23 Models
Workforce Protectionweb-activity-allowed
leef-mwg-proxy
s-mwg-web-activity
n-mwg-proxy
mwg-proxy-1
mwg-proxy-2
json-mwg-web-activity
mwg-proxy-3
s-mwg-proxy-3-denied
cef-mwg-proxy
s-mwg-proxy-1
T1071.001 - Application Layer Protocol: Web Protocols
  • 4 Rules
  • 2 Models
Next Page -->>

MITRE ATT&CK® Framework for Enterprise

Initial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
Phishing: Spearphishing Link

Valid Accounts

Drive-by Compromise

Exploit Public Fasing Application

Phishing

User Execution

Valid Accounts

Valid Accounts

Valid Accounts

Internal Spearphishing

Web Service

Application Layer Protocol: Web Protocols

Dynamic Resolution

Dynamic Resolution: Domain Generation Algorithms

Proxy: Multi-hop Proxy

Application Layer Protocol

Proxy

Exfiltration Over C2 Channel

Exfiltration Over Web Service: Exfiltration to Cloud Storage

Exfiltration Over Web Service

Resource Hijacking