Vendor: Progress

April 15, 2026 · View on GitHub

Product: Progress ShareFile

RulesModelsMITRE ATT&CK® TTPsActivity TypesParsers
1114520610
Use-CaseActivity Types/ParsersMITRE ATT&CK® TTPContent
Abnormal Authentication & Accessapp-activity
citrix-sharefile-sk4-app-activity-success-editnote
citrix-sharefile-sk4-app-activity-success-usermodifiedpermission
progress-sharefile-json-app-activity-success-shareid
progress-sharefile-json-app-activity-success-usermakingchange
progress-sharefile-json-app-activity-eventid

app-login
progress-sharefile-json-app-activity-eventid
citrix-sharefile-sk4-app-login-success-tfalogin
citrix-sharefile-sk4-app-login-success-loginactivity

failed-app-login
citrix-sharefile-sk4-app-login-fail-tfaloginfail
citrix-sharefile-sk4-app-login-fail-failedlogin
progress-sharefile-json-app-activity-eventid
citrix-sharefile-sk4-app-login-fail-loginlocked
T1078 - Valid Accounts
T1133 - External Remote Services
  • 15 Rules
  • 4 Models
Account Manipulationapp-activity
citrix-sharefile-sk4-app-activity-success-editnote
citrix-sharefile-sk4-app-activity-success-usermodifiedpermission
progress-sharefile-json-app-activity-success-shareid
progress-sharefile-json-app-activity-success-usermakingchange
progress-sharefile-json-app-activity-eventid
T1098 - Account Manipulation
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions
  • 3 Rules
  • 1 Models
Data Exfiltrationfile-write
progress-sharefile-json-app-activity-success-usermakingchange
progress-sharefile-json-app-activity-eventid
TA0002 - TA0002
  • 2 Rules
  • 1 Models
Next Page -->>

MITRE ATT&CK® Framework for Enterprise

Initial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
External Remote Services

Valid Accounts

Exploit Public Fasing Application

External Remote Services

Valid Accounts

Server Software Component: Web Shell

Account Manipulation

Server Software Component

Boot or Logon Autostart Execution

Account Manipulation: Exchange Email Delegate Permissions

Valid Accounts

Boot or Logon Autostart Execution

Valid Accounts

OS Credential Dumping

File and Directory Discovery

Email Collection

Email Collection: Email Forwarding Rule

Proxy: Multi-hop Proxy

Proxy

Data Encrypted for Impact