Product | Event Types | MITRE TTP | Content |
---|---|---|---|
AWS CloudTrail |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Accellion |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Adaxes |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
AWS CloudTrail |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Apache Subversion |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Atlassian BitBucket |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Barracuda Firewall |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
BeyondTrust |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
BeyondTrust PowerBroker |
|
T1222.001 - File and Directory Permissions Modification: Windows File and Directory Permissions Modification |
|
BeyondTrust Privilege Management |
|
T1222.001 - File and Directory Permissions Modification: Windows File and Directory Permissions Modification |
|
BeyondTrust Privileged Identity |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
BeyondTrust Secure Remote Access |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
BlackBerry Protect |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Box Cloud Content Management |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Cato Cloud |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Centrify Infrastructure Services |
|
T1222.001 - File and Directory Permissions Modification: Windows File and Directory Permissions Modification |
|
Centrify Zero Trust Privilege Services |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Check Point Identity Awareness |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Check Point Security Gateway |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
AnyConnect |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Cisco ACS |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Cisco Adaptive Security Appliance |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions T1222.001 - File and Directory Permissions Modification: Windows File and Directory Permissions Modification |
|
Cisco Call Manager |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Cisco ISE |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Cisco Meraki MX appliances |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Cisco NPE |
|
T1222.001 - File and Directory Permissions Modification: Windows File and Directory Permissions Modification |
|
Cisco TACACS |
|
T1222.001 - File and Directory Permissions Modification: Windows File and Directory Permissions Modification |
|
Cisco Umbrella |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Duo Access Security |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Citrix Endpoint Management |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Citrix Gateway ActiveSync Connector |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Citrix Netscaler |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions T1222.001 - File and Directory Permissions Modification: Windows File and Directory Permissions Modification |
|
Citrix Netscaler VPN |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Citrix ShareFile |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Cloudflare Insights |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Falcon |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions T1222.001 - File and Directory Permissions Modification: Windows File and Directory Permissions Modification |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
CyberArk Vault |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Privileged Session Manager |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
One Identity Manager |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
SonicWALL Aventail |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Digital Guardian Endpoint Protection |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions T1222.001 - File and Directory Permissions Modification: Windows File and Directory Permissions Modification |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Dropbox |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
DTEX InTERCEPT |
|
T1222.001 - File and Directory Permissions Modification: Windows File and Directory Permissions Modification |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Duo Access Security |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
EMP |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Egnyte |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Epic SIEM |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Epic SIEM |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Exabeam Advanced Analytics |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
F5 BIG-IP Access Policy Manager (APM) |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
FTP |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Forcepoint CASB |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Fortinet Enterprise Firewall |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Fortinet UTM |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Fortinet VPN |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
GitHub |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
|
Google Calendar |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Google Cloud Platform |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
HP Comware |
|
T1222.001 - File and Directory Permissions Modification: Windows File and Directory Permissions Modification |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Powertech Identity Access Manager (BoKs) |
|
T1222.001 - File and Directory Permissions Modification: Windows File and Directory Permissions Modification |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Unified Security Gateway |
|
T1222.001 - File and Directory Permissions Modification: Windows File and Directory Permissions Modification |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
IBM Racf |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
ICDB |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
IPswitch MoveIt |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Juniper Networks Pulse Secure |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Juniper SRX |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Juniper VPN |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Kemp LoadMaster |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Kiteworks |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
LEAP |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
SharePoint |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
LanScope Cat |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions T1222.001 - File and Directory Permissions Modification: Windows File and Directory Permissions Modification |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
LanScope Cat |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
LastPass |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
LogRhythm |
|
T1222.001 - File and Directory Permissions Modification: Windows File and Directory Permissions Modification |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Skyhigh Networks CASB |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Exchange |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Microsoft Azure |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions T1222.001 - File and Directory Permissions Modification: Windows File and Directory Permissions Modification |
|
Microsoft Azure Active Directory |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Microsoft Azure MFA |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Microsoft Cloud App Security (MCAS) |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Microsoft Defender ATP |
|
T1222.001 - File and Directory Permissions Modification: Windows File and Directory Permissions Modification |
|
Microsoft Office 365 |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions T1222.001 - File and Directory Permissions Modification: Windows File and Directory Permissions Modification |
|
Microsoft Sysmon |
|
T1222.001 - File and Directory Permissions Modification: Windows File and Directory Permissions Modification |
|
Microsoft Windows |
|
T1222.001 - File and Directory Permissions Modification: Windows File and Directory Permissions Modification |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Mimecast |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Mimecast Email Security |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
NCP |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
NetDocs |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
NetMotion Wireless |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Netskope Security Cloud |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Netwrix Auditor |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Nortel Contivity VPN |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
ObserveIT |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions T1222.001 - File and Directory Permissions Modification: Windows File and Directory Permissions Modification |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Okta Adaptive MFA |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
OneLogin |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Oracle Solaris |
|
T1222.001 - File and Directory Permissions Modification: Windows File and Directory Permissions Modification |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Cortex XDR |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
GlobalProtect |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
NGFW |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Palo Alto Aperture |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Perforce |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
PowerSentry |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Pro.File DMS |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
SecurID |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
RangerAudit |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
SAP |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
SSL Open VPN |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
IdentityNow |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Salesforce |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
SecureLink |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
SecureNet |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
SentinelOne |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions T1222.001 - File and Directory Permissions Modification: Windows File and Directory Permissions Modification |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
ServiceNow |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
ClientView |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions T1222.001 - File and Directory Permissions Modification: Windows File and Directory Permissions Modification |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Slack |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Sonicwall |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Sophos Endpoint Protection |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Sophos SafeGuard |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Swivel |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Symantec CloudSOC |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Symantec EDR |
|
T1222.001 - File and Directory Permissions Modification: Windows File and Directory Permissions Modification |
|
Symantec Endpoint Protection |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Symantec VIP |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Endpoint Platform |
|
T1222.001 - File and Directory Permissions Modification: Windows File and Directory Permissions Modification |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Thycotic Secret Server |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
CCURE Building Management System |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Auditbeat |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions T1222.001 - File and Directory Permissions Modification: Windows File and Directory Permissions Modification |
|
Unix |
|
T1222.001 - File and Directory Permissions Modification: Windows File and Directory Permissions Modification |
|
Unix Auditd |
|
T1222.001 - File and Directory Permissions Modification: Windows File and Directory Permissions Modification |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
VMware Carbon Black App Control |
|
T1222.001 - File and Directory Permissions Modification: Windows File and Directory Permissions Modification |
|
VMware Carbon Black Cloud Endpoint Standard |
|
T1222.001 - File and Directory Permissions Modification: Windows File and Directory Permissions Modification |
|
VMware Carbon Black EDR |
|
T1222.001 - File and Directory Permissions Modification: Windows File and Directory Permissions Modification |
|
VMware VCenter |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
VMware View |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Vectra Cognito Detect |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Workday |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Zeek Network Security Monitor |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Zlock |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
Zscaler Private Access |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
eDocs |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
iManage |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|
Product | Event Types | MITRE TTP | Content |
---|---|---|---|
oVirt |
|
T1098.002 - Account Manipulation: Exchange Email Delegate Permissions |
|