Vendor: Oracle

June 14, 2023 · View on GitHub

Product: PeopleSoft

Use-Case: Ransomware

RulesModelsMITRE ATT&CK® TTPsEvent TypesParsers
10111
Event TypeRulesModels
authentication-failedT1078 - Valid Accounts
Auth-Ransomware-Shost-Failed: User authentication or login failure from a known ransomware IP