Vendor: Apache

July 25, 2023 · View on GitHub

Product: Apache

Use-Case: Privileged Activity

RulesModelsMITRE TTPsEvent TypesParsers
20222
Event TypeRulesModels
web-activity-allowedT1071.001 - Application Layer Protocol: Web Protocols
A-WEB-DC: Web activity event on a Domain Controller
WEB-ALERT-EXEC: Security violation by Executive in web activity

T1102 - Web Service
A-WEB-DC: Web activity event on a Domain Controller