Failed Access by Disabled Badge

Description

Trigged when acess to a badge panel (door or otherwise) is denied because the badge is disabled. Disabled doe not neceissarly mean terminated.

Content Mapping

This content is not mapped to any local saved search. Add mapping


Use Case

Insider Threat, Security Monitoring

Category

Insider Threat

Alert Volume

Low

Journey

Stage 4

MITRE ATT&CK Tactics

Reconnaissance

MITRE ATT&CK Techniques

Gather Victim Org Information
Determine Physical Locations

Data Sources

Physical Security