Vendor: Mimecast

June 14, 2023 · View on GitHub

Product: Email Security

RulesModelsMITRE ATT&CK® TTPsEvent TypesParsers
10543777
Use-CaseEvent Types/ParsersMITRE ATT&CK® TTPContent
Abnormal Authentication & Accessapp-activity
cef-mimecast-message-view
s-mimecast-app-activity
s-mimecast-app-activity-1

app-login
s-mimecast-app-login
cef-skyformation-mimecast-login

failed-app-login
cef-mimecast-failed-app-login
s-mimecast-app-login
T1078 - Valid Accounts
T1133 - External Remote Services
  • 15 Rules
  • 4 Models
Account Manipulationapp-activity
cef-mimecast-message-view
s-mimecast-app-activity
s-mimecast-app-activity-1
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions
  • 3 Rules
  • 1 Models
Phishingdlp-email-alert-out
cef-mimecast-dlp-email
cef-mimecast-dlp-email
s-mimecast-dlp-email
s-mimecast-dlp-email
cef-mimecast-email-alert
cef-mimecast-email-alert-2
cef-mimecast-email-alert-3
T1048.003 - Exfiltration Over Alternative Protocol: Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol
  • 1 Rules
  • 1 Models
Privilege Escalationapp-activity
cef-mimecast-message-view
s-mimecast-app-activity
s-mimecast-app-activity-1
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions
  • 3 Rules
  • 1 Models
Workforce Protectiondlp-email-alert-out
cef-mimecast-dlp-email
cef-mimecast-dlp-email
s-mimecast-dlp-email
s-mimecast-dlp-email
cef-mimecast-email-alert
cef-mimecast-email-alert-2
cef-mimecast-email-alert-3
T1048.003 - Exfiltration Over Alternative Protocol: Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol
  • 4 Rules
  • 1 Models
Next Page -->>

MITRE ATT&CK® Framework for Enterprise

Initial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
External Remote Services

Valid Accounts

Exploit Public Fasing Application

External Remote Services

Valid Accounts

Account Manipulation

Account Manipulation: Exchange Email Delegate Permissions

Valid Accounts

Valid Accounts

Email Collection

Email Collection: Email Forwarding Rule

Proxy: Multi-hop Proxy

Proxy

Exfiltration Over Alternative Protocol

Exfiltration Over Alternative Protocol: Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol