r_m_helpsystems_powertech_identity_access_manager_(boks)_Privileged_Asset_Abuse.md

Vendor: HelpSystems

Product: Powertech Identity Access Manager (BoKs)

Use-Case: Privileged Asset Abuse

Rules	Models	MITRE TTPs	Event Types	Parsers
1	1	1	7	7

Event Type	Rules	Models
local-logon	T1078 - Valid Accounts ↳ AL-HT-PRIV: Non-Privileged logon to privileged asset	• AL-HT-PRIV: Privilege Users Assets
remote-logon	T1078 - Valid Accounts ↳ AL-HT-PRIV: Non-Privileged logon to privileged asset	• AL-HT-PRIV: Privilege Users Assets