r_m_axway_axway_sftp_Privileged_Asset_Abuse.md

Vendor: Axway

Product: Axway SFTP

Use-Case: Privileged Asset Abuse

Rules	Models	MITRE TTPs	Event Types	Parsers
1	1	1	2	2

Event Type	Rules	Models
remote-logon	T1078 - Valid Accounts ↳ AL-HT-PRIV: Non-Privileged logon to privileged asset	• AL-HT-PRIV: Privilege Users Assets