Manipulation of Control T0831

ICS Tactic: Impact

Authoring guide

These 1 rule share fields, values, and exclusions.

Fields filtered most (3 distinct)

These fields appear most often in rule filters.

FieldRulesHowSample values
CurrentAccountNum1cross_field_compare 1OldAccountNum
LogType1eq 1Update
TableName1eq 1BankAccountTable

Top indicator values (3 distinct)

These values appear most often in rule predicates.

FieldKindValueRules (here)Corpus reach
CurrentAccountNumcross_field_compare
OldAccountNum
12
LogTypeeq
Update
13
TableNameeq
BankAccountTable
12

Rules under this technique

These vendors publish rules tagged with this technique.

Platform: Microsoft 365

Domain: SaaS

Kusto 1 rule