D3FEND 技术详情

D3-AZET

D3-AZET

Authorization Event Thresholding

定义

Collecting authorization events, creating a baseline user profile, and determining whether authorization events are consistent with the baseline profile.

父技术
子技术
关联构件
暂无关联构件
语义关系
出向analyzesAuthorization
出向kb referenceReference - Method and Apparatus for Network Fraud Detection and Remediation Through Analytics - Idaptive LLC
出向kb referenceReference - CAR-2013-09-003: SMB Session Setups - MITRE
出向kb referenceReference - System, method, and computer program product for detecting and assessing security risks in a network - Exabeam Inc
出向kb referenceReference - CAR-2013-02-012: User Logged in to Multiple Hosts - MITRE