| Compromised Credentials | account-password-change
↳q-kiteworks-email-out
↳accelion-kite-app-activity-email-alert
↳q-kiteworks-email-out-1
account-password-reset
↳kiteworks-account-unlocked-1
↳kiteworks-account-unlocked-2
account-unlocked
↳kiteworks-account-lockout-1
app-activity
↳accelion-kite-failed-app-login
↳kiteworks-failed-app-login-1
app-login
↳accelion-kite-app-activity-5
↳q-kiteworks-app-activity
↳accelion-kite-app-activity-2
↳accelion-kite-app-activity-4
↳accelion-kite-app-activity-3
↳accelion-kite-app-delete-draft
↳accelion-kite-app-setting
↳accelion-kite-app-user-delete
↳q-kiteworks-app-activity-4
↳q-kiteworks-app-activity-5
↳accelion-kite-app-network-setting
↳accelion-kite-app-file-withdraw
↳q-kiteworks-app-activity-1
↳q-kiteworks-app-activity-2
↳q-kiteworks-app-activity-3
↳accelion-kite-app-system
↳accelion-kite-app-3
dlp-email-alert-out
↳accelion-kite-app-login-1
↳q-kiteworks-app-login-1
↳accelion-kite-app-admin-login
↳q-kiteworks-app-login
failed-app-login
↳accelion-kite-app-reset-password
file-alert
↳q-kiteworks-file-upload
↳q-kiteworks-file-upload-1
↳accelion-kite-app-3
file-delete
↳q-kiteworks-file-write
file-download
↳accelion-kite-app-activity-6
↳q-kiteworks-file-read
↳q-kiteworks-file-read-1
file-permission-change
↳accelion-kite-app-password-change
↳q-kiteworks-password-change
↳kiteworks-password-change-1
file-read
↳q-kiteworks-file-delete
↳accelion-kite-app-file-delete
↳accelion-kite-app-file-delete-1
file-upload
↳q-kiteworks-file-download-2
↳q-kiteworks-file-download-1
↳accelion-kite-app-download-1
↳q-kiteworks-file-download
↳accelion-kite-app-download
file-write
↳q-kiteworks-file-permission-change
security-alert
↳accelion-dlp-alert
| T1003.001 - T1003.001
T1003.003 - T1003.003
T1020 - Automated Exfiltration
T1027.005 - Obfuscated Files or Information: Indicator Removal from Tools
T1071 - Application Layer Protocol
T1078 - Valid Accounts
T1083 - File and Directory Discovery
T1133 - External Remote Services
| |
| Data Access | account-password-change
↳q-kiteworks-email-out
↳accelion-kite-app-activity-email-alert
↳q-kiteworks-email-out-1
account-password-reset
↳kiteworks-account-unlocked-1
↳kiteworks-account-unlocked-2
account-unlocked
↳kiteworks-account-lockout-1
app-activity
↳accelion-kite-failed-app-login
↳kiteworks-failed-app-login-1
app-login
↳accelion-kite-app-activity-5
↳q-kiteworks-app-activity
↳accelion-kite-app-activity-2
↳accelion-kite-app-activity-4
↳accelion-kite-app-activity-3
↳accelion-kite-app-delete-draft
↳accelion-kite-app-setting
↳accelion-kite-app-user-delete
↳q-kiteworks-app-activity-4
↳q-kiteworks-app-activity-5
↳accelion-kite-app-network-setting
↳accelion-kite-app-file-withdraw
↳q-kiteworks-app-activity-1
↳q-kiteworks-app-activity-2
↳q-kiteworks-app-activity-3
↳accelion-kite-app-system
↳accelion-kite-app-3
dlp-email-alert-out
↳accelion-kite-app-login-1
↳q-kiteworks-app-login-1
↳accelion-kite-app-admin-login
↳q-kiteworks-app-login
failed-app-login
↳accelion-kite-app-reset-password
file-alert
↳q-kiteworks-file-upload
↳q-kiteworks-file-upload-1
↳accelion-kite-app-3
file-delete
↳q-kiteworks-file-write
file-download
↳accelion-kite-app-activity-6
↳q-kiteworks-file-read
↳q-kiteworks-file-read-1
file-permission-change
↳accelion-kite-app-password-change
↳q-kiteworks-password-change
↳kiteworks-password-change-1
file-read
↳q-kiteworks-file-delete
↳accelion-kite-app-file-delete
↳accelion-kite-app-file-delete-1
file-upload
↳q-kiteworks-file-download-2
↳q-kiteworks-file-download-1
↳accelion-kite-app-download-1
↳q-kiteworks-file-download
↳accelion-kite-app-download
file-write
↳q-kiteworks-file-permission-change
security-alert
↳accelion-dlp-alert
| T1078 - Valid Accounts
T1083 - File and Directory Discovery
| |
| Data Exfiltration | account-password-change
↳q-kiteworks-email-out
↳accelion-kite-app-activity-email-alert
↳q-kiteworks-email-out-1
account-password-reset
↳kiteworks-account-unlocked-1
↳kiteworks-account-unlocked-2
account-unlocked
↳kiteworks-account-lockout-1
app-activity
↳accelion-kite-failed-app-login
↳kiteworks-failed-app-login-1
app-login
↳accelion-kite-app-activity-5
↳q-kiteworks-app-activity
↳accelion-kite-app-activity-2
↳accelion-kite-app-activity-4
↳accelion-kite-app-activity-3
↳accelion-kite-app-delete-draft
↳accelion-kite-app-setting
↳accelion-kite-app-user-delete
↳q-kiteworks-app-activity-4
↳q-kiteworks-app-activity-5
↳accelion-kite-app-network-setting
↳accelion-kite-app-file-withdraw
↳q-kiteworks-app-activity-1
↳q-kiteworks-app-activity-2
↳q-kiteworks-app-activity-3
↳accelion-kite-app-system
↳accelion-kite-app-3
dlp-email-alert-out
↳accelion-kite-app-login-1
↳q-kiteworks-app-login-1
↳accelion-kite-app-admin-login
↳q-kiteworks-app-login
failed-app-login
↳accelion-kite-app-reset-password
file-alert
↳q-kiteworks-file-upload
↳q-kiteworks-file-upload-1
↳accelion-kite-app-3
file-delete
↳q-kiteworks-file-write
file-download
↳accelion-kite-app-activity-6
↳q-kiteworks-file-read
↳q-kiteworks-file-read-1
file-permission-change
↳accelion-kite-app-password-change
↳q-kiteworks-password-change
↳kiteworks-password-change-1
file-read
↳q-kiteworks-file-delete
↳accelion-kite-app-file-delete
↳accelion-kite-app-file-delete-1
file-upload
↳q-kiteworks-file-download-2
↳q-kiteworks-file-download-1
↳accelion-kite-app-download-1
↳q-kiteworks-file-download
↳accelion-kite-app-download
file-write
↳q-kiteworks-file-permission-change
security-alert
↳accelion-dlp-alert
| T1048 - Exfiltration Over Alternative Protocol
T1204 - User Execution
| |
| Data Leak | account-password-change
↳q-kiteworks-email-out
↳accelion-kite-app-activity-email-alert
↳q-kiteworks-email-out-1
account-password-reset
↳kiteworks-account-unlocked-1
↳kiteworks-account-unlocked-2
account-unlocked
↳kiteworks-account-lockout-1
app-activity
↳accelion-kite-failed-app-login
↳kiteworks-failed-app-login-1
app-login
↳accelion-kite-app-activity-5
↳q-kiteworks-app-activity
↳accelion-kite-app-activity-2
↳accelion-kite-app-activity-4
↳accelion-kite-app-activity-3
↳accelion-kite-app-delete-draft
↳accelion-kite-app-setting
↳accelion-kite-app-user-delete
↳q-kiteworks-app-activity-4
↳q-kiteworks-app-activity-5
↳accelion-kite-app-network-setting
↳accelion-kite-app-file-withdraw
↳q-kiteworks-app-activity-1
↳q-kiteworks-app-activity-2
↳q-kiteworks-app-activity-3
↳accelion-kite-app-system
↳accelion-kite-app-3
dlp-email-alert-out
↳accelion-kite-app-login-1
↳q-kiteworks-app-login-1
↳accelion-kite-app-admin-login
↳q-kiteworks-app-login
failed-app-login
↳accelion-kite-app-reset-password
file-alert
↳q-kiteworks-file-upload
↳q-kiteworks-file-upload-1
↳accelion-kite-app-3
file-delete
↳q-kiteworks-file-write
file-download
↳accelion-kite-app-activity-6
↳q-kiteworks-file-read
↳q-kiteworks-file-read-1
file-permission-change
↳accelion-kite-app-password-change
↳q-kiteworks-password-change
↳kiteworks-password-change-1
file-read
↳q-kiteworks-file-delete
↳accelion-kite-app-file-delete
↳accelion-kite-app-file-delete-1
file-upload
↳q-kiteworks-file-download-2
↳q-kiteworks-file-download-1
↳accelion-kite-app-download-1
↳q-kiteworks-file-download
↳accelion-kite-app-download
file-write
↳q-kiteworks-file-permission-change
security-alert
↳accelion-dlp-alert
| T1020 - Automated Exfiltration
T1048 - Exfiltration Over Alternative Protocol
T1048.003 - Exfiltration Over Alternative Protocol: Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol
T1114.001 - T1114.001
T1114.003 - Email Collection: Email Forwarding Rule
| |
| Destruction of Data | account-password-change
↳q-kiteworks-email-out
↳accelion-kite-app-activity-email-alert
↳q-kiteworks-email-out-1
account-password-reset
↳kiteworks-account-unlocked-1
↳kiteworks-account-unlocked-2
account-unlocked
↳kiteworks-account-lockout-1
app-activity
↳accelion-kite-failed-app-login
↳kiteworks-failed-app-login-1
app-login
↳accelion-kite-app-activity-5
↳q-kiteworks-app-activity
↳accelion-kite-app-activity-2
↳accelion-kite-app-activity-4
↳accelion-kite-app-activity-3
↳accelion-kite-app-delete-draft
↳accelion-kite-app-setting
↳accelion-kite-app-user-delete
↳q-kiteworks-app-activity-4
↳q-kiteworks-app-activity-5
↳accelion-kite-app-network-setting
↳accelion-kite-app-file-withdraw
↳q-kiteworks-app-activity-1
↳q-kiteworks-app-activity-2
↳q-kiteworks-app-activity-3
↳accelion-kite-app-system
↳accelion-kite-app-3
dlp-email-alert-out
↳accelion-kite-app-login-1
↳q-kiteworks-app-login-1
↳accelion-kite-app-admin-login
↳q-kiteworks-app-login
failed-app-login
↳accelion-kite-app-reset-password
file-alert
↳q-kiteworks-file-upload
↳q-kiteworks-file-upload-1
↳accelion-kite-app-3
file-delete
↳q-kiteworks-file-write
file-download
↳accelion-kite-app-activity-6
↳q-kiteworks-file-read
↳q-kiteworks-file-read-1
file-permission-change
↳accelion-kite-app-password-change
↳q-kiteworks-password-change
↳kiteworks-password-change-1
file-read
↳q-kiteworks-file-delete
↳accelion-kite-app-file-delete
↳accelion-kite-app-file-delete-1
file-upload
↳q-kiteworks-file-download-2
↳q-kiteworks-file-download-1
↳accelion-kite-app-download-1
↳q-kiteworks-file-download
↳accelion-kite-app-download
file-write
↳q-kiteworks-file-permission-change
security-alert
↳accelion-dlp-alert
| T1070.004 - Indicator Removal on Host: File Deletion
| |
| Evasion | account-password-change
↳q-kiteworks-email-out
↳accelion-kite-app-activity-email-alert
↳q-kiteworks-email-out-1
account-password-reset
↳kiteworks-account-unlocked-1
↳kiteworks-account-unlocked-2
account-unlocked
↳kiteworks-account-lockout-1
app-activity
↳accelion-kite-failed-app-login
↳kiteworks-failed-app-login-1
app-login
↳accelion-kite-app-activity-5
↳q-kiteworks-app-activity
↳accelion-kite-app-activity-2
↳accelion-kite-app-activity-4
↳accelion-kite-app-activity-3
↳accelion-kite-app-delete-draft
↳accelion-kite-app-setting
↳accelion-kite-app-user-delete
↳q-kiteworks-app-activity-4
↳q-kiteworks-app-activity-5
↳accelion-kite-app-network-setting
↳accelion-kite-app-file-withdraw
↳q-kiteworks-app-activity-1
↳q-kiteworks-app-activity-2
↳q-kiteworks-app-activity-3
↳accelion-kite-app-system
↳accelion-kite-app-3
dlp-email-alert-out
↳accelion-kite-app-login-1
↳q-kiteworks-app-login-1
↳accelion-kite-app-admin-login
↳q-kiteworks-app-login
failed-app-login
↳accelion-kite-app-reset-password
file-alert
↳q-kiteworks-file-upload
↳q-kiteworks-file-upload-1
↳accelion-kite-app-3
file-delete
↳q-kiteworks-file-write
file-download
↳accelion-kite-app-activity-6
↳q-kiteworks-file-read
↳q-kiteworks-file-read-1
file-permission-change
↳accelion-kite-app-password-change
↳q-kiteworks-password-change
↳kiteworks-password-change-1
file-read
↳q-kiteworks-file-delete
↳accelion-kite-app-file-delete
↳accelion-kite-app-file-delete-1
file-upload
↳q-kiteworks-file-download-2
↳q-kiteworks-file-download-1
↳accelion-kite-app-download-1
↳q-kiteworks-file-download
↳accelion-kite-app-download
file-write
↳q-kiteworks-file-permission-change
security-alert
↳accelion-dlp-alert
| T1090.003 - Proxy: Multi-hop Proxy
| |
| Lateral Movement | account-password-change
↳q-kiteworks-email-out
↳accelion-kite-app-activity-email-alert
↳q-kiteworks-email-out-1
account-password-reset
↳kiteworks-account-unlocked-1
↳kiteworks-account-unlocked-2
account-unlocked
↳kiteworks-account-lockout-1
app-activity
↳accelion-kite-failed-app-login
↳kiteworks-failed-app-login-1
app-login
↳accelion-kite-app-activity-5
↳q-kiteworks-app-activity
↳accelion-kite-app-activity-2
↳accelion-kite-app-activity-4
↳accelion-kite-app-activity-3
↳accelion-kite-app-delete-draft
↳accelion-kite-app-setting
↳accelion-kite-app-user-delete
↳q-kiteworks-app-activity-4
↳q-kiteworks-app-activity-5
↳accelion-kite-app-network-setting
↳accelion-kite-app-file-withdraw
↳q-kiteworks-app-activity-1
↳q-kiteworks-app-activity-2
↳q-kiteworks-app-activity-3
↳accelion-kite-app-system
↳accelion-kite-app-3
dlp-email-alert-out
↳accelion-kite-app-login-1
↳q-kiteworks-app-login-1
↳accelion-kite-app-admin-login
↳q-kiteworks-app-login
failed-app-login
↳accelion-kite-app-reset-password
file-alert
↳q-kiteworks-file-upload
↳q-kiteworks-file-upload-1
↳accelion-kite-app-3
file-delete
↳q-kiteworks-file-write
file-download
↳accelion-kite-app-activity-6
↳q-kiteworks-file-read
↳q-kiteworks-file-read-1
file-permission-change
↳accelion-kite-app-password-change
↳q-kiteworks-password-change
↳kiteworks-password-change-1
file-read
↳q-kiteworks-file-delete
↳accelion-kite-app-file-delete
↳accelion-kite-app-file-delete-1
file-upload
↳q-kiteworks-file-download-2
↳q-kiteworks-file-download-1
↳accelion-kite-app-download-1
↳q-kiteworks-file-download
↳accelion-kite-app-download
file-write
↳q-kiteworks-file-permission-change
security-alert
↳accelion-dlp-alert
| T1027.005 - Obfuscated Files or Information: Indicator Removal from Tools
| |
| Malware | account-password-change
↳q-kiteworks-email-out
↳accelion-kite-app-activity-email-alert
↳q-kiteworks-email-out-1
account-password-reset
↳kiteworks-account-unlocked-1
↳kiteworks-account-unlocked-2
account-unlocked
↳kiteworks-account-lockout-1
app-activity
↳accelion-kite-failed-app-login
↳kiteworks-failed-app-login-1
app-login
↳accelion-kite-app-activity-5
↳q-kiteworks-app-activity
↳accelion-kite-app-activity-2
↳accelion-kite-app-activity-4
↳accelion-kite-app-activity-3
↳accelion-kite-app-delete-draft
↳accelion-kite-app-setting
↳accelion-kite-app-user-delete
↳q-kiteworks-app-activity-4
↳q-kiteworks-app-activity-5
↳accelion-kite-app-network-setting
↳accelion-kite-app-file-withdraw
↳q-kiteworks-app-activity-1
↳q-kiteworks-app-activity-2
↳q-kiteworks-app-activity-3
↳accelion-kite-app-system
↳accelion-kite-app-3
dlp-email-alert-out
↳accelion-kite-app-login-1
↳q-kiteworks-app-login-1
↳accelion-kite-app-admin-login
↳q-kiteworks-app-login
failed-app-login
↳accelion-kite-app-reset-password
file-alert
↳q-kiteworks-file-upload
↳q-kiteworks-file-upload-1
↳accelion-kite-app-3
file-delete
↳q-kiteworks-file-write
file-download
↳accelion-kite-app-activity-6
↳q-kiteworks-file-read
↳q-kiteworks-file-read-1
file-permission-change
↳accelion-kite-app-password-change
↳q-kiteworks-password-change
↳kiteworks-password-change-1
file-read
↳q-kiteworks-file-delete
↳accelion-kite-app-file-delete
↳accelion-kite-app-file-delete-1
file-upload
↳q-kiteworks-file-download-2
↳q-kiteworks-file-download-1
↳accelion-kite-app-download-1
↳q-kiteworks-file-download
↳accelion-kite-app-download
file-write
↳q-kiteworks-file-permission-change
security-alert
↳accelion-dlp-alert
| T1003.002 - T1003.002
T1027 - Obfuscated Files or Information
T1055.012 - T1055.012
T1078 - Valid Accounts
T1204 - User Execution
T1218.011 - Signed Binary Proxy Execution: Rundll32
| |
| Phishing | account-password-change
↳q-kiteworks-email-out
↳accelion-kite-app-activity-email-alert
↳q-kiteworks-email-out-1
account-password-reset
↳kiteworks-account-unlocked-1
↳kiteworks-account-unlocked-2
account-unlocked
↳kiteworks-account-lockout-1
app-activity
↳accelion-kite-failed-app-login
↳kiteworks-failed-app-login-1
app-login
↳accelion-kite-app-activity-5
↳q-kiteworks-app-activity
↳accelion-kite-app-activity-2
↳accelion-kite-app-activity-4
↳accelion-kite-app-activity-3
↳accelion-kite-app-delete-draft
↳accelion-kite-app-setting
↳accelion-kite-app-user-delete
↳q-kiteworks-app-activity-4
↳q-kiteworks-app-activity-5
↳accelion-kite-app-network-setting
↳accelion-kite-app-file-withdraw
↳q-kiteworks-app-activity-1
↳q-kiteworks-app-activity-2
↳q-kiteworks-app-activity-3
↳accelion-kite-app-system
↳accelion-kite-app-3
dlp-email-alert-out
↳accelion-kite-app-login-1
↳q-kiteworks-app-login-1
↳accelion-kite-app-admin-login
↳q-kiteworks-app-login
failed-app-login
↳accelion-kite-app-reset-password
file-alert
↳q-kiteworks-file-upload
↳q-kiteworks-file-upload-1
↳accelion-kite-app-3
file-delete
↳q-kiteworks-file-write
file-download
↳accelion-kite-app-activity-6
↳q-kiteworks-file-read
↳q-kiteworks-file-read-1
file-permission-change
↳accelion-kite-app-password-change
↳q-kiteworks-password-change
↳kiteworks-password-change-1
file-read
↳q-kiteworks-file-delete
↳accelion-kite-app-file-delete
↳accelion-kite-app-file-delete-1
file-upload
↳q-kiteworks-file-download-2
↳q-kiteworks-file-download-1
↳accelion-kite-app-download-1
↳q-kiteworks-file-download
↳accelion-kite-app-download
file-write
↳q-kiteworks-file-permission-change
security-alert
↳accelion-dlp-alert
| T1048.003 - Exfiltration Over Alternative Protocol: Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol
| |
| Privilege Abuse | account-password-change
↳q-kiteworks-email-out
↳accelion-kite-app-activity-email-alert
↳q-kiteworks-email-out-1
account-password-reset
↳kiteworks-account-unlocked-1
↳kiteworks-account-unlocked-2
account-unlocked
↳kiteworks-account-lockout-1
app-activity
↳accelion-kite-failed-app-login
↳kiteworks-failed-app-login-1
app-login
↳accelion-kite-app-activity-5
↳q-kiteworks-app-activity
↳accelion-kite-app-activity-2
↳accelion-kite-app-activity-4
↳accelion-kite-app-activity-3
↳accelion-kite-app-delete-draft
↳accelion-kite-app-setting
↳accelion-kite-app-user-delete
↳q-kiteworks-app-activity-4
↳q-kiteworks-app-activity-5
↳accelion-kite-app-network-setting
↳accelion-kite-app-file-withdraw
↳q-kiteworks-app-activity-1
↳q-kiteworks-app-activity-2
↳q-kiteworks-app-activity-3
↳accelion-kite-app-system
↳accelion-kite-app-3
dlp-email-alert-out
↳accelion-kite-app-login-1
↳q-kiteworks-app-login-1
↳accelion-kite-app-admin-login
↳q-kiteworks-app-login
failed-app-login
↳accelion-kite-app-reset-password
file-alert
↳q-kiteworks-file-upload
↳q-kiteworks-file-upload-1
↳accelion-kite-app-3
file-delete
↳q-kiteworks-file-write
file-download
↳accelion-kite-app-activity-6
↳q-kiteworks-file-read
↳q-kiteworks-file-read-1
file-permission-change
↳accelion-kite-app-password-change
↳q-kiteworks-password-change
↳kiteworks-password-change-1
file-read
↳q-kiteworks-file-delete
↳accelion-kite-app-file-delete
↳accelion-kite-app-file-delete-1
file-upload
↳q-kiteworks-file-download-2
↳q-kiteworks-file-download-1
↳accelion-kite-app-download-1
↳q-kiteworks-file-download
↳accelion-kite-app-download
file-write
↳q-kiteworks-file-permission-change
security-alert
↳accelion-dlp-alert
| T1078 - Valid Accounts
T1098 - Account Manipulation
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions
| |
| Privilege Escalation | account-password-change
↳q-kiteworks-email-out
↳accelion-kite-app-activity-email-alert
↳q-kiteworks-email-out-1
account-password-reset
↳kiteworks-account-unlocked-1
↳kiteworks-account-unlocked-2
account-unlocked
↳kiteworks-account-lockout-1
app-activity
↳accelion-kite-failed-app-login
↳kiteworks-failed-app-login-1
app-login
↳accelion-kite-app-activity-5
↳q-kiteworks-app-activity
↳accelion-kite-app-activity-2
↳accelion-kite-app-activity-4
↳accelion-kite-app-activity-3
↳accelion-kite-app-delete-draft
↳accelion-kite-app-setting
↳accelion-kite-app-user-delete
↳q-kiteworks-app-activity-4
↳q-kiteworks-app-activity-5
↳accelion-kite-app-network-setting
↳accelion-kite-app-file-withdraw
↳q-kiteworks-app-activity-1
↳q-kiteworks-app-activity-2
↳q-kiteworks-app-activity-3
↳accelion-kite-app-system
↳accelion-kite-app-3
dlp-email-alert-out
↳accelion-kite-app-login-1
↳q-kiteworks-app-login-1
↳accelion-kite-app-admin-login
↳q-kiteworks-app-login
failed-app-login
↳accelion-kite-app-reset-password
file-alert
↳q-kiteworks-file-upload
↳q-kiteworks-file-upload-1
↳accelion-kite-app-3
file-delete
↳q-kiteworks-file-write
file-download
↳accelion-kite-app-activity-6
↳q-kiteworks-file-read
↳q-kiteworks-file-read-1
file-permission-change
↳accelion-kite-app-password-change
↳q-kiteworks-password-change
↳kiteworks-password-change-1
file-read
↳q-kiteworks-file-delete
↳accelion-kite-app-file-delete
↳accelion-kite-app-file-delete-1
file-upload
↳q-kiteworks-file-download-2
↳q-kiteworks-file-download-1
↳accelion-kite-app-download-1
↳q-kiteworks-file-download
↳accelion-kite-app-download
file-write
↳q-kiteworks-file-permission-change
security-alert
↳accelion-dlp-alert
| T1021.002 - Remote Services: SMB/Windows Admin Shares
T1087 - Account Discovery
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions
| |
| Privileged Activity | account-password-change
↳q-kiteworks-email-out
↳accelion-kite-app-activity-email-alert
↳q-kiteworks-email-out-1
account-password-reset
↳kiteworks-account-unlocked-1
↳kiteworks-account-unlocked-2
account-unlocked
↳kiteworks-account-lockout-1
app-activity
↳accelion-kite-failed-app-login
↳kiteworks-failed-app-login-1
app-login
↳accelion-kite-app-activity-5
↳q-kiteworks-app-activity
↳accelion-kite-app-activity-2
↳accelion-kite-app-activity-4
↳accelion-kite-app-activity-3
↳accelion-kite-app-delete-draft
↳accelion-kite-app-setting
↳accelion-kite-app-user-delete
↳q-kiteworks-app-activity-4
↳q-kiteworks-app-activity-5
↳accelion-kite-app-network-setting
↳accelion-kite-app-file-withdraw
↳q-kiteworks-app-activity-1
↳q-kiteworks-app-activity-2
↳q-kiteworks-app-activity-3
↳accelion-kite-app-system
↳accelion-kite-app-3
dlp-email-alert-out
↳accelion-kite-app-login-1
↳q-kiteworks-app-login-1
↳accelion-kite-app-admin-login
↳q-kiteworks-app-login
failed-app-login
↳accelion-kite-app-reset-password
file-alert
↳q-kiteworks-file-upload
↳q-kiteworks-file-upload-1
↳accelion-kite-app-3
file-delete
↳q-kiteworks-file-write
file-download
↳accelion-kite-app-activity-6
↳q-kiteworks-file-read
↳q-kiteworks-file-read-1
file-permission-change
↳accelion-kite-app-password-change
↳q-kiteworks-password-change
↳kiteworks-password-change-1
file-read
↳q-kiteworks-file-delete
↳accelion-kite-app-file-delete
↳accelion-kite-app-file-delete-1
file-upload
↳q-kiteworks-file-download-2
↳q-kiteworks-file-download-1
↳accelion-kite-app-download-1
↳q-kiteworks-file-download
↳accelion-kite-app-download
file-write
↳q-kiteworks-file-permission-change
security-alert
↳accelion-dlp-alert
| T1068 - Exploitation for Privilege Escalation
T1078 - Valid Accounts
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions
| |
| Ransomware | account-password-change
↳q-kiteworks-email-out
↳accelion-kite-app-activity-email-alert
↳q-kiteworks-email-out-1
account-password-reset
↳kiteworks-account-unlocked-1
↳kiteworks-account-unlocked-2
account-unlocked
↳kiteworks-account-lockout-1
app-activity
↳accelion-kite-failed-app-login
↳kiteworks-failed-app-login-1
app-login
↳accelion-kite-app-activity-5
↳q-kiteworks-app-activity
↳accelion-kite-app-activity-2
↳accelion-kite-app-activity-4
↳accelion-kite-app-activity-3
↳accelion-kite-app-delete-draft
↳accelion-kite-app-setting
↳accelion-kite-app-user-delete
↳q-kiteworks-app-activity-4
↳q-kiteworks-app-activity-5
↳accelion-kite-app-network-setting
↳accelion-kite-app-file-withdraw
↳q-kiteworks-app-activity-1
↳q-kiteworks-app-activity-2
↳q-kiteworks-app-activity-3
↳accelion-kite-app-system
↳accelion-kite-app-3
dlp-email-alert-out
↳accelion-kite-app-login-1
↳q-kiteworks-app-login-1
↳accelion-kite-app-admin-login
↳q-kiteworks-app-login
failed-app-login
↳accelion-kite-app-reset-password
file-alert
↳q-kiteworks-file-upload
↳q-kiteworks-file-upload-1
↳accelion-kite-app-3
file-delete
↳q-kiteworks-file-write
file-download
↳accelion-kite-app-activity-6
↳q-kiteworks-file-read
↳q-kiteworks-file-read-1
file-permission-change
↳accelion-kite-app-password-change
↳q-kiteworks-password-change
↳kiteworks-password-change-1
file-read
↳q-kiteworks-file-delete
↳accelion-kite-app-file-delete
↳accelion-kite-app-file-delete-1
file-upload
↳q-kiteworks-file-download-2
↳q-kiteworks-file-download-1
↳accelion-kite-app-download-1
↳q-kiteworks-file-download
↳accelion-kite-app-download
file-write
↳q-kiteworks-file-permission-change
security-alert
↳accelion-dlp-alert
| T1078 - Valid Accounts
T1486 - Data Encrypted for Impact
| |
| Workforce Protection | account-password-change
↳q-kiteworks-email-out
↳accelion-kite-app-activity-email-alert
↳q-kiteworks-email-out-1
account-password-reset
↳kiteworks-account-unlocked-1
↳kiteworks-account-unlocked-2
account-unlocked
↳kiteworks-account-lockout-1
app-activity
↳accelion-kite-failed-app-login
↳kiteworks-failed-app-login-1
app-login
↳accelion-kite-app-activity-5
↳q-kiteworks-app-activity
↳accelion-kite-app-activity-2
↳accelion-kite-app-activity-4
↳accelion-kite-app-activity-3
↳accelion-kite-app-delete-draft
↳accelion-kite-app-setting
↳accelion-kite-app-user-delete
↳q-kiteworks-app-activity-4
↳q-kiteworks-app-activity-5
↳accelion-kite-app-network-setting
↳accelion-kite-app-file-withdraw
↳q-kiteworks-app-activity-1
↳q-kiteworks-app-activity-2
↳q-kiteworks-app-activity-3
↳accelion-kite-app-system
↳accelion-kite-app-3
dlp-email-alert-out
↳accelion-kite-app-login-1
↳q-kiteworks-app-login-1
↳accelion-kite-app-admin-login
↳q-kiteworks-app-login
failed-app-login
↳accelion-kite-app-reset-password
file-alert
↳q-kiteworks-file-upload
↳q-kiteworks-file-upload-1
↳accelion-kite-app-3
file-delete
↳q-kiteworks-file-write
file-download
↳accelion-kite-app-activity-6
↳q-kiteworks-file-read
↳q-kiteworks-file-read-1
file-permission-change
↳accelion-kite-app-password-change
↳q-kiteworks-password-change
↳kiteworks-password-change-1
file-read
↳q-kiteworks-file-delete
↳accelion-kite-app-file-delete
↳accelion-kite-app-file-delete-1
file-upload
↳q-kiteworks-file-download-2
↳q-kiteworks-file-download-1
↳accelion-kite-app-download-1
↳q-kiteworks-file-download
↳accelion-kite-app-download
file-write
↳q-kiteworks-file-permission-change
security-alert
↳accelion-dlp-alert
| T1048.003 - Exfiltration Over Alternative Protocol: Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol
| |