Vendor: AccessIT
July 25, 2023 · View on GitHub
Product: Universal.NET
Use-Case: Physical Security
| Rules | Models | MITRE TTPs | Event Types | Parsers |
|---|---|---|---|---|
| 8 | 3 | 1 | 1 | 1 |
| Event Type | Rules | Models |
|---|---|---|
| physical-access | T1078 - Valid Accounts ↳ PA-UC-F: First physical access in this location for user ↳ PA-UC-A: Abnormal physical access in this location for user ↳ PA-UB-F: First physical access in this building for user ↳ PA-UB-A: Abnormal physical access in this building for user ↳ PA-UD-F: First physical access to door for user ↳ PA-UTi-A: Badge access at abnormal time ↳ PA-MC: Badge access in multiple cities within a session ↳ PA-DU: Badge access by disabled user | • PA-UTi: Badge access time • PA-UD: Door level badge access by user • PA-UB: Building level badge access by user |