Geographically Improbable Access (Physical access and VPN)

Geographically Improbable Access (Physical access and VPN)

Description

Geographically Improbable Access - Physical and VPN

Content Mapping

This content has been mapped to the local saved search:

  • Threat - BadgeGeo - Rule [Remove]


Use Case

Advanced Threat Detection

Category

Account Compromise

Alert Volume

Medium

Data Availability

Bad

Journey

Stage 1

MITRE ATT&CK Tactics

Lateral Movement

MITRE ATT&CK Techniques

Remote Services

Data Sources

IP Address Assignment
Authentication
Physical Security

   External Content

This content is made available by a third-party (“Third-Party Content”) and is subject to the provisions governing Third-Party Content set forth in the Splunk Software License Agreement. Splunk neither controls nor endorses, nor is Splunk responsible for, any Third-Party Content, including the accuracy, integrity, quality, legality, usefulness or safety of Third-Party Content. Use of such Third-Party Content is at the user’s own risk and may be subject to additional terms, conditions and policies applicable to such Third-Party Content (such as license terms, terms of service or privacy policies of the provider of such Third-Party Content).

For information on the provider of this Third-Party Content, please review the "" section below.

   About Content Provider

This content provider didn't provide any information about their organization. The content provided is custom.

   Search

Open in Search