CLOUD Token Theft

Cloud Incident Response Incident

Details

IDCLOUD Token Theft
Groupincident
Version-1
From Version6.8.0

Layout Structure

Legacy Summary 0 sections

No sections defined.

Alert Details 5 sections

Work Plan

Alert Information

Field IDPosition
details Col 0-3, Height: 52
xdrdescription Col 0-2, Height: 26
xdrincidentid Col 0-2, Height: 26
xdrurl Col 0-2, Height: 26
xdralertcategory Col 0-2, Height: 26
xdralertname Col 0-2, Height: 26
xdrdetectiontime Col 0-2, Height: 26
dbotcreated Col 0-2, Height: 26
categoryname Col 0-2, Height: 26
severity Col 0-2, Height: 26
xdrhostcount Col 0-2, Height: 26
xdrusercount Col 0-2, Height: 26
xdralertcount Col 0-2, Height: 26
xdrhighseverityalertcount Col 0-2, Height: 26
xdrmediumseverityalertcount Col 0-2, Height: 26
xdrlowseverityalertcount Col 0-2, Height: 26
playbookid Col 0-2, Height: 26
mitreattcktactic Col 4-6, Height: 26
mitreattcktechnique Col 4-6, Height: 26

Cloud Extra Data

Field IDPosition
xdralerts Col 0-2, Height: 26
cloudaccountid Col 0-2, Height: 26
cloudproject Col 0-2, Height: 26
cloudidentitytype Col 0-2, Height: 26
cloudoperationtype Col 0-2, Height: 26
cloudresourcetype Col 0-2, Height: 26
cloudreferencedresource Col 0-2, Height: 26
cloudinstanceid Col 0-2, Height: 26

Alert Extended Information

Cloud Provider

Technical Details 8 sections

Attacker Extra Data

Field IDPosition
hostip Col 0-2, Height: 26
isvpnipaddress Col 0-2, Height: 26
useragent Col 0-2, Height: 26
asnname Col 0-2, Height: 26
asn Col 0-2, Height: 26
country Col 0-2, Height: 26

Regions

Malicious or Suspicious Indicators

Resource Type

Related Alerts

Identity Table

Hunting Results

Cloud Indicators

The indicators extracted from the threat hunting results.

War Room 0 sections

No sections defined.

Work Plan 0 sections

No sections defined.

Canvas 0 sections

No sections defined.