Mapping MDATP - DeviceProcessEvents and DeviceFileEvents - Githubissues

OTRF / OSSEM-DM

OSSEM Detection Model

MIT License

167 stars 43 forks source link

Mapping MDATP - DeviceProcessEvents and DeviceFileEvents #9

Closed Cyb3rPandaH closed 3 years ago

Cyb3rPandaH commented 3 years ago

Relationships:

process created file
process created process
process executed command
process modified file
user created file
user created process
user executed command
user modified file