Vendor: VMware

November 29, 2023 · View on GitHub

Product: VMware View

RulesModelsMITRE ATT&CK® TTPsActivity TypesParsers
4517422
Use-CaseActivity Types/ParsersMITRE ATT&CK® TTPContent
Abnormal Authentication & Accessapp-login
vmware-view-str-app-login-success-viewuser

authentication-failed
vmware-view-str-endpoint-logout-success-disconnected
vmware-view-kv-app-logout-success-userloggedout
vmware-view-str-app-logout-success-loggedoff
vmware-view-str-app-logout-success-loggedout
vmware-view-str-app-activity-success-application
vmware-view-str-app-notification-expired
vmware-view-str-app-notification-success-connection
vmware-view-str-app-notification-success-shutdown
vmware-view-str-app-notification-success-reconfigured
vmware-view-str-endpoint-delete-success-deleted
vmware-view-str-endpoint-login-success-reconnected
vmware-view-str-app-authentication-fail-rejected
vmware-view-str-app-authentication-fail-denied
vmware-view-str-endpoint-authentication-success-application
T1078 - Valid Accounts
T1133 - External Remote Services
  • 15 Rules
  • 4 Models
Compromised Credentialsapp-login
vmware-view-str-app-login-success-viewuser
T1078 - Valid Accounts
T1133 - External Remote Services
T1190 - Exploit Public Fasing Application
  • 27 Rules
  • 16 Models
Data Accessapp-login
vmware-view-str-app-login-success-viewuser
T1078 - Valid Accounts
  • 5 Rules
  • 4 Models
Malwareapp-login
vmware-view-str-app-login-success-viewuser
T1078 - Valid Accounts
  • 1 Rules
Privilege Abuseapp-login
vmware-view-str-app-login-success-viewuser
T1078 - Valid Accounts
  • 2 Rules
Privileged Activityapp-login
vmware-view-str-app-login-success-viewuser
T1078 - Valid Accounts
  • 1 Rules
Next Page -->>

MITRE ATT&CK® Framework for Enterprise

Initial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
External Remote Services

Valid Accounts

Exploit Public Fasing Application

External Remote Services

Valid Accounts

Valid Accounts

Valid Accounts

Proxy: Multi-hop Proxy

Proxy