2_ds_apache_apache_subversion.md

November 29, 2023 · View on GitHub

Use-CaseActivity Types/ParsersMITRE ATT&CK® TTPContent
Compromised Credentialsapp-activity
apache-subversion-mix-app-activity-headsvn-1
apache-subversion-mix-app-activity-get
apache-subversion-mix-app-activity-headsvn
apache-subversion-mix-app-activity-putsvn
apache-subversion-mix-app-activity-reportsvn
apache-subversion-mix-app-activity-proppatchsvn
apache-subversion-mix-app-activity-optionssvn
apache-subversion-mix-app-activity-postsvn
T1078 - Valid Accounts
T1133 - External Remote Services
  • 39 Rules
  • 24 Models
Data Accessapp-activity
apache-subversion-mix-app-activity-headsvn-1
apache-subversion-mix-app-activity-get
apache-subversion-mix-app-activity-headsvn
apache-subversion-mix-app-activity-putsvn
apache-subversion-mix-app-activity-reportsvn
apache-subversion-mix-app-activity-proppatchsvn
apache-subversion-mix-app-activity-optionssvn
apache-subversion-mix-app-activity-postsvn
T1078 - Valid Accounts
  • 19 Rules
  • 11 Models
Data Leakapp-activity
apache-subversion-mix-app-activity-headsvn-1
apache-subversion-mix-app-activity-get
apache-subversion-mix-app-activity-headsvn
apache-subversion-mix-app-activity-putsvn
apache-subversion-mix-app-activity-reportsvn
apache-subversion-mix-app-activity-proppatchsvn
apache-subversion-mix-app-activity-optionssvn
apache-subversion-mix-app-activity-postsvn
T1114.003 - Email Collection: Email Forwarding Rule
  • 3 Rules
Lateral Movementapp-activity
apache-subversion-mix-app-activity-headsvn-1
apache-subversion-mix-app-activity-get
apache-subversion-mix-app-activity-headsvn
apache-subversion-mix-app-activity-putsvn
apache-subversion-mix-app-activity-reportsvn
apache-subversion-mix-app-activity-proppatchsvn
apache-subversion-mix-app-activity-optionssvn
apache-subversion-mix-app-activity-postsvn

app-activity-failed
apache-subversion-mix-app-activity-headsvn-1
apache-subversion-mix-app-activity-get
apache-subversion-mix-app-activity-headsvn
apache-subversion-mix-app-activity-putsvn
apache-subversion-mix-app-activity-reportsvn
apache-subversion-mix-app-activity-proppatchsvn
apache-subversion-mix-app-activity-optionssvn
apache-subversion-mix-app-activity-postsvn
T1078 - Valid Accounts
T1090.003 - Proxy: Multi-hop Proxy
  • 2 Rules
Malwareapp-activity
apache-subversion-mix-app-activity-headsvn-1
apache-subversion-mix-app-activity-get
apache-subversion-mix-app-activity-headsvn
apache-subversion-mix-app-activity-putsvn
apache-subversion-mix-app-activity-reportsvn
apache-subversion-mix-app-activity-proppatchsvn
apache-subversion-mix-app-activity-optionssvn
apache-subversion-mix-app-activity-postsvn
T1078 - Valid Accounts
  • 1 Rules
Privilege Abuseapp-activity
apache-subversion-mix-app-activity-headsvn-1
apache-subversion-mix-app-activity-get
apache-subversion-mix-app-activity-headsvn
apache-subversion-mix-app-activity-putsvn
apache-subversion-mix-app-activity-reportsvn
apache-subversion-mix-app-activity-proppatchsvn
apache-subversion-mix-app-activity-optionssvn
apache-subversion-mix-app-activity-postsvn

app-activity-failed
apache-subversion-mix-app-activity-headsvn-1
apache-subversion-mix-app-activity-get
apache-subversion-mix-app-activity-headsvn
apache-subversion-mix-app-activity-putsvn
apache-subversion-mix-app-activity-reportsvn
apache-subversion-mix-app-activity-proppatchsvn
apache-subversion-mix-app-activity-optionssvn
apache-subversion-mix-app-activity-postsvn
T1078 - Valid Accounts
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions
  • 6 Rules
  • 2 Models
Privilege Escalationapp-activity
apache-subversion-mix-app-activity-headsvn-1
apache-subversion-mix-app-activity-get
apache-subversion-mix-app-activity-headsvn
apache-subversion-mix-app-activity-putsvn
apache-subversion-mix-app-activity-reportsvn
apache-subversion-mix-app-activity-proppatchsvn
apache-subversion-mix-app-activity-optionssvn
apache-subversion-mix-app-activity-postsvn
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions
  • 3 Rules
  • 1 Models
Privileged Activityapp-activity
apache-subversion-mix-app-activity-headsvn-1
apache-subversion-mix-app-activity-get
apache-subversion-mix-app-activity-headsvn
apache-subversion-mix-app-activity-putsvn
apache-subversion-mix-app-activity-reportsvn
apache-subversion-mix-app-activity-proppatchsvn
apache-subversion-mix-app-activity-optionssvn
apache-subversion-mix-app-activity-postsvn

app-activity-failed
apache-subversion-mix-app-activity-headsvn-1
apache-subversion-mix-app-activity-get
apache-subversion-mix-app-activity-headsvn
apache-subversion-mix-app-activity-putsvn
apache-subversion-mix-app-activity-reportsvn
apache-subversion-mix-app-activity-proppatchsvn
apache-subversion-mix-app-activity-optionssvn
apache-subversion-mix-app-activity-postsvn
T1078 - Valid Accounts
  • 2 Rules
  • 1 Models
Ransomwareapp-activity
apache-subversion-mix-app-activity-headsvn-1
apache-subversion-mix-app-activity-get
apache-subversion-mix-app-activity-headsvn
apache-subversion-mix-app-activity-putsvn
apache-subversion-mix-app-activity-reportsvn
apache-subversion-mix-app-activity-proppatchsvn
apache-subversion-mix-app-activity-optionssvn
apache-subversion-mix-app-activity-postsvn

app-activity-failed
apache-subversion-mix-app-activity-headsvn-1
apache-subversion-mix-app-activity-get
apache-subversion-mix-app-activity-headsvn
apache-subversion-mix-app-activity-putsvn
apache-subversion-mix-app-activity-reportsvn
apache-subversion-mix-app-activity-proppatchsvn
apache-subversion-mix-app-activity-optionssvn
apache-subversion-mix-app-activity-postsvn
T1078 - Valid Accounts
  • 2 Rules