Navigation :
Data Exfiltration after Account Takeover, Medium
Description
This threat is based on the compromised account threat, however looks for data exfiltration after account takeover instead of suspicious behavior.
Content Mapping
This content is not mapped to any local saved search. Add mapping
Use Case
Advanced Threat Detection, Security Monitoring
Category
Data Exfiltration, Account Compromise
Alert Volume
Medium
(?)SPL Difficulty
None
Journey
Stage 4
Data Sources
Windows Security
Audit Trail
Host-based IDS
Network Communication
Anti-Virus or Anti-Malware
Authentication
IDS or IPS
DLP
Email
Endpoint Detection and Response
Web Proxy