Analytics
Low
✕
Logs were not collected from a data source for an abnormally long time
Logs were not collected from a data source for an abnormally long time.
- Module:
- Platform Analytics
- Data source:
- Health Monitoring Data
ATT&CK tactics: Impact (TA0040)
ATT&CK techniques: Network Denial of Service (T1498) Service Stop (T1489)
Attacker's goals:
N/A.
Investigative actions:
N/A.
- Test period:
- 1 Day
- Deduplication:
- 6 Hours
4 variations:
- Logs were not collected from a Windows Event Collector (WEC) for an abnormally long time Low
- Logs were not collected from a Microsoft Windows XDR Collector (XDRC) for an abnormally long time Low
- Logs were not collected from a data source for an abnormally long time, which indicates a significant stop Medium (parent: Low)
- Logs were not collected from a data source for an abnormally long time, despite a stable and consistent data stream until recently Medium (parent: Low)