Vendor: Microsoft

June 14, 2023 · View on GitHub

Product: Windows

Use-Case: Physical Security

RulesModelsMITRE ATT&CK® TTPsEvent TypesParsers
11111
Event TypeRulesModels
vpn-loginT1133 - External Remote Services
PA-VPN-01: VPN login after badge access
PA-VPN-01: Users who vpn-in after badge access