Skip to content

Hide Navigation Hide TOC

Authorization Event Thresholding (583a20a1-97f7-518f-9799-36df6fb57102)

Collecting authorization events, creating a baseline user profile, and determining whether authorization events are consistent with the baseline profile.

Cluster A Galaxy A Cluster B Galaxy B Level
Authorization Event Thresholding (583a20a1-97f7-518f-9799-36df6fb57102) MITRE D3FEND External Remote Services - T1133 (10d51417-ee35-4589-b1ff-b6df1c334e8d) Attack Pattern 1
Authorization Event Thresholding (583a20a1-97f7-518f-9799-36df6fb57102) MITRE D3FEND Valid Accounts - T1078 (b17a1a56-e99c-403c-8948-561df0cffe81) Attack Pattern 1