Data Exfiltration after Account Takeover, High

Description

This threat is based on the compromised account threat, however looks for data exfiltration after account takeover instead of suspicious behavior.

Content Mapping

This content is not mapped to any local saved search. Add mapping


Use Case

Advanced Threat Detection, Security Monitoring

Category

Account Compromise, Data Exfiltration

Alert Volume

Low

Journey

Stage 4

Data Sources

Anti-Virus or Anti-Malware
IDS or IPS
DLP
Host-based IDS
Web Proxy
Endpoint Detection and Response
Authentication
Email
Network Communication
Audit Trail