Vendor: Citrix

November 29, 2023 · View on GitHub

Product: Citrix ShareFile

RulesModelsMITRE ATT&CK® TTPsActivity TypesParsers
6726633
Use-CaseActivity Types/ParsersMITRE ATT&CK® TTPContent
Abnormal Authentication & Accessapp-activity
citrix-sharefile-sk4-app-activity-success-editnote
citrix-sharefile-sk4-app-activity-success-usermodifiedpermission

app-login
citrix-sharefile-sk4-app-login-success-tfalogin

failed-app-login
citrix-sharefile-sk4-app-login-fail-tfaloginfail
citrix-sharefile-sk4-app-login-fail-loginlocked
T1078 - Valid Accounts
T1133 - External Remote Services
  • 15 Rules
  • 4 Models
Account Manipulationapp-activity
citrix-sharefile-sk4-app-activity-success-editnote
citrix-sharefile-sk4-app-activity-success-usermodifiedpermission
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions
  • 3 Rules
  • 1 Models
Data Leakapp-activity
citrix-sharefile-sk4-app-activity-success-editnote
citrix-sharefile-sk4-app-activity-success-usermodifiedpermission
T1114.003 - Email Collection: Email Forwarding Rule
  • 3 Rules
Malwareapp-activity
citrix-sharefile-sk4-app-activity-success-editnote
citrix-sharefile-sk4-app-activity-success-usermodifiedpermission

app-login
citrix-sharefile-sk4-app-login-success-tfalogin
T1078 - Valid Accounts
  • 1 Rules
Privilege Escalationapp-activity
citrix-sharefile-sk4-app-activity-success-editnote
citrix-sharefile-sk4-app-activity-success-usermodifiedpermission
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions
  • 3 Rules
  • 1 Models
Next Page -->>

MITRE ATT&CK® Framework for Enterprise

Initial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
External Remote Services

Valid Accounts

Exploit Public Fasing Application

External Remote Services

Valid Accounts

Account Manipulation

Account Manipulation: Exchange Email Delegate Permissions

Valid Accounts

Valid Accounts

Email Collection

Email Collection: Email Forwarding Rule

Proxy: Multi-hop Proxy

Proxy