Impossible Travel (b2572bf9-e20a-4594-b528-40bde666525a)
Identifies user activities originating from geographically distant locations within a time period shorter than the time it takes to travel from the first location to the second.
Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
---|---|---|---|---|
Valid Accounts - T1078 (b17a1a56-e99c-403c-8948-561df0cffe81) | Attack Pattern | Impossible Travel (b2572bf9-e20a-4594-b528-40bde666525a) | Sigma-Rules | 1 |