Rules by Product and UseCase

April 15, 2026 · View on GitHub

Vendor: Radware

Product: Alteon

Use-Case: Ransomware

RulesModelsMITRE ATT&CK® TTPsActivity TypesParsers
10110
Event TypeRulesModels
failed-app-loginT1078 - Valid Accounts
Auth-Ransomware-Shost-Failed: User authentication or login failure from a known ransomware IP