Cisco Secure Email Threat Defense unusual spike found for the high severity verdict techniques

Docs > Plateforme de sécurité Datadog > OOTB Rules > Cisco Secure Email Threat Defense unusual spike found for the high severity verdict techniques

This rule is part of a beta feature. To learn more, contact Support.

Classification:

attack

Tactic:

TA0001-initial-access

Technique:

T1566-phishing

Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel, n'hésitez pas à nous contacter.

Goal

Detects emails when there are unusual spikes in high-severity verdict techniques that helps to analyze the techniques that cause the threats in email.

Strategy

This rule monitors emails to detect unusual spikes in high-severity verdict techniques.

Triage and response

Investigate high-severity technique - {{@verdict.techniques.type}} using which threat emails has been detected.
Assess the potential impact of these threat emails on systems, data, operations, and overall security posture.
Take prevention steps to reduce threats emails sent with similar techniques.