Vendor: Armis

Product: Armis Platform

Rules	Models	MITRE ATT&CK® TTPs	Activity Types	Parsers
3	2	1	1	3

Use-Case	Activity Types/Parsers	MITRE ATT&CK® TTP	Content
Compromised Credentials	alert-iot ↳armis-a-json-alert-trigger-success-systempolicyviolation ↳armis-a-json-alert-trigger-success-systempolicyviolation-1 ↳armis-a-cef-alert-trigger-success-systempolicyviolation ↳armis-a-json-alert-trigger-success-systempolicyviolation ↳armis-a-json-alert-trigger-success-systempolicyviolation-1 ↳armis-a-cef-alert-trigger-success-systempolicyviolation ↳armis-a-cef-alert-trigger-success-systempolicyviolation-1	T1078 - Valid Accounts	3 Rules 2 Models

MITRE ATT&CK® Framework for Enterprise

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Valid Accounts		Valid Accounts	Valid Accounts	Valid Accounts