Use Case: Brute Force Attack

December 5, 2023 · View on GitHub

Use Case: Brute Force Attack

Vendor: Accellion

Product	MITRE ATT&CK® TTP	Content
Kiteworks	T1110 - Brute Force	1 Rules

Vendor: Auth0

Product	MITRE ATT&CK® TTP	Content
Auth0	T1021.001 - Remote Services: Remote Desktop Protocol T1110 - Brute Force T1110.003 - T1110.003	9 Rules

Vendor: Barracuda

Product	MITRE ATT&CK® TTP	Content
Barracuda Cloudgen Firewall	T1021.001 - Remote Services: Remote Desktop Protocol T1110 - Brute Force T1110.003 - T1110.003	9 Rules

Vendor: CDS

Product	MITRE ATT&CK® TTP	Content
CDS	T1021.001 - Remote Services: Remote Desktop Protocol T1110 - Brute Force T1110.003 - T1110.003	9 Rules

Vendor: Check Point

Product	MITRE ATT&CK® TTP	Content
Check Point NGFW	T1110 - Brute Force	1 Rules 1 Models
Check Point Security Gateway	T1110 - Brute Force	1 Rules 1 Models

Vendor: Cisco

Product	MITRE ATT&CK® TTP	Content
AnyConnect	T1110 - Brute Force	1 Rules 1 Models
Cisco Adaptive Security Appliance	T1110 - Brute Force	1 Rules 1 Models
Cisco Firepower	T1110 - Brute Force	1 Rules 1 Models
Cisco ISE	T1021.001 - Remote Services: Remote Desktop Protocol T1110 - Brute Force T1110.003 - T1110.003	9 Rules
Duo Access	T1110 - Brute Force	1 Rules

Vendor: Citrix

Product	MITRE ATT&CK® TTP	Content
Citrix Gateway	T1110 - Brute Force	1 Rules 1 Models

Vendor: Claroty

Product	MITRE ATT&CK® TTP	Content
CTD	T1021.001 - Remote Services: Remote Desktop Protocol T1110 - Brute Force T1110.003 - T1110.003	9 Rules

Vendor: CyberArk

Product	MITRE ATT&CK® TTP	Content
CyberArk Privilege Access Manager	T1021.001 - Remote Services: Remote Desktop Protocol T1110 - Brute Force T1110.003 - T1110.003	9 Rules

Vendor: Dell

Product	MITRE ATT&CK® TTP	Content
Sonicwall	T1110 - Brute Force	1 Rules 1 Models

Vendor: Dropbox

Product	MITRE ATT&CK® TTP	Content
Dropbox	T1110 - Brute Force	1 Rules 1 Models

Vendor: F5

Product	MITRE ATT&CK® TTP	Content
F5 Access Policy Manager	T1110 - Brute Force	1 Rules 1 Models
F5 BIG-IP	T1110 - Brute Force	1 Rules 1 Models

Vendor: Fortinet

Product	MITRE ATT&CK® TTP	Content
FortiGate	T1110 - Brute Force	1 Rules 1 Models

Vendor: GoAnywhere

Product	MITRE ATT&CK® TTP	Content
GoAnywhere MFT	T1021.001 - Remote Services: Remote Desktop Protocol T1110 - Brute Force T1110.003 - T1110.003	9 Rules

Vendor: Ivanti

Product	MITRE ATT&CK® TTP	Content
Ivanti Pulse Secure	T1110 - Brute Force	1 Rules 1 Models

Vendor: Microsoft

Product	MITRE ATT&CK® TTP	Content
Event Viewer - NTLM	T1021.001 - Remote Services: Remote Desktop Protocol T1110 - Brute Force T1110.003 - T1110.003	9 Rules
Event Viewer - Security	T1021.001 - Remote Services: Remote Desktop Protocol T1110 - Brute Force T1110.003 - T1110.003	11 Rules 1 Models
Microsoft Defender for Endpoint	T1021.001 - Remote Services: Remote Desktop Protocol T1110 - Brute Force T1110.003 - T1110.003	9 Rules

Vendor: NCP

Product	MITRE ATT&CK® TTP	Content
NCP	T1110 - Brute Force	1 Rules 1 Models

Vendor: Netwrix

Product	MITRE ATT&CK® TTP	Content
Netwrix Auditor	T1021.001 - Remote Services: Remote Desktop Protocol T1110 - Brute Force T1110.003 - T1110.003	10 Rules

Vendor: Nortel Contivity

Product	MITRE ATT&CK® TTP	Content
Nortel Contivity VPN	T1110 - Brute Force	1 Rules 1 Models

Vendor: Okta

Product	MITRE ATT&CK® TTP	Content
Okta Adaptive MFA	T1110 - Brute Force	1 Rules

Vendor: Open VPN

Product	MITRE ATT&CK® TTP	Content
Open VPN	T1110 - Brute Force	1 Rules 1 Models

Vendor: Palo Alto Networks

Product	MITRE ATT&CK® TTP	Content
GlobalProtect	T1110 - Brute Force	1 Rules 1 Models
Palo Alto NGFW	T1021.001 - Remote Services: Remote Desktop Protocol T1110 - Brute Force T1110.003 - T1110.003	10 Rules 1 Models
Prisma Cloud	T1021.001 - Remote Services: Remote Desktop Protocol T1110 - Brute Force T1110.003 - T1110.003	9 Rules

Vendor: Quest Software

Product	MITRE ATT&CK® TTP	Content
Quest Change Auditor for Active Directory	T1110 - Brute Force	1 Rules

Vendor: RSA

Product	MITRE ATT&CK® TTP	Content
RSA Authentication Manager	T1110 - Brute Force	1 Rules
SecurID	T1110 - Brute Force	1 Rules 1 Models

Vendor: SAP

Product	MITRE ATT&CK® TTP	Content
SAP	T1110 - Brute Force	1 Rules

Vendor: SecureNet

Product	MITRE ATT&CK® TTP	Content
SecureNet	T1110 - Brute Force	1 Rules 1 Models

Vendor: Symantec

Product	MITRE ATT&CK® TTP	Content
Symantec Critical System Protection	T1021.001 - Remote Services: Remote Desktop Protocol T1110 - Brute Force T1110.003 - T1110.003	9 Rules

Vendor: Unix

Product	MITRE ATT&CK® TTP	Content
Unix	T1021.001 - Remote Services: Remote Desktop Protocol T1110 - Brute Force T1110.003 - T1110.003	9 Rules
Unix Auditd	T1021.001 - Remote Services: Remote Desktop Protocol T1110 - Brute Force T1110.003 - T1110.003	9 Rules

Vendor: Wazuh

Product	MITRE ATT&CK® TTP	Content
Wazuh	T1021.001 - Remote Services: Remote Desktop Protocol T1110 - Brute Force T1110.003 - T1110.003	9 Rules

Vendor: Zeek

Product	MITRE ATT&CK® TTP	Content
Zeek	T1021.001 - Remote Services: Remote Desktop Protocol T1110 - Brute Force T1110.003 - T1110.003	9 Rules

Vendor:

Product	MITRE ATT&CK® TTP	Content
	T1021.001 - Remote Services: Remote Desktop Protocol T1110 - Brute Force T1110.003 - T1110.003	9 Rules