Cisco Secure Email Threat Defense unusual spike found for the high severity verdict techniques

문서 > Datadog 보안 > OOTB Rules > Cisco Secure Email Threat Defense unusual spike found for the high severity verdict techniques

This rule is part of a beta feature. To learn more, contact Support.

Classification:

attack

Tactic:

TA0001-initial-access

Technique:

T1566-phishing

이 페이지는 아직 영어로 제공되지 않습니다. 번역 작업 중입니다.
현재 번역 프로젝트에 대한 질문이나 피드백이 있으신 경우 언제든지 연락주시기 바랍니다.

Goal

Detects emails when there are unusual spikes in high-severity verdict techniques that helps to analyze the techniques that cause the threats in email.

Strategy

This rule monitors emails to detect unusual spikes in high-severity verdict techniques.

Triage and response

Investigate high-severity technique - {{@verdict.techniques.type}} using which threat emails has been detected.
Assess the potential impact of these threat emails on systems, data, operations, and overall security posture.
Take prevention steps to reduce threats emails sent with similar techniques.