Geographically Improbable Access (Physical access and VPN)

Geographically Improbable Access (Physical access and VPN)


Geographically Improbable Access - Physical and VPN

Content Mapping

This content has been mapped to the local saved search:

  • Threat - BadgeGeo - Rule [Remove]

Use Case

Advanced Threat Detection


Account Compromise

Alert Volume


Data Availability



Stage 1


Lateral Movement

MITRE ATT&CK Techniques

Remote Services

Data Sources

IP Address Assignment
Physical Security

   External Content

This content is made available by a third-party (“Third-Party Content”) and is subject to the provisions governing Third-Party Content set forth in the Splunk Software License Agreement. Splunk neither controls nor endorses, nor is Splunk responsible for, any Third-Party Content, including the accuracy, integrity, quality, legality, usefulness or safety of Third-Party Content. Use of such Third-Party Content is at the user’s own risk and may be subject to additional terms, conditions and policies applicable to such Third-Party Content (such as license terms, terms of service or privacy policies of the provider of such Third-Party Content).

For information on the provider of this Third-Party Content, please review the "" section below.

   About Content Provider

This content provider didn't provide any information about their organization. The content provided is custom.


Open in Search