Skip to content

Latest commit

 

History

History
31 lines (24 loc) · 899 Bytes

MATCH-S00120.md

File metadata and controls

31 lines (24 loc) · 899 Bytes

Rules: G Suite - User Accounts - 2SV Disabled

Description

User disabled 2SV

Additional Details

Detail Value
Type Templated Match
Category Persistence
Apply Risk to Entities user_username
Signal Name G Suite - User Accounts - 2SV Disabled
Summary Expression User: {{user_username}} disabled 2-step verification
Score/Severity Static: 3
Enabled by Default True
Prototype False
Tags _mitreAttackTactic:TA0001, _mitreAttackTactic:TA0003, _mitreAttackTactic:TA0004, _mitreAttackTactic:TA0005, _mitreAttackTechnique:T1078, _mitreAttackTechnique:T1078.004

Vendors and Products

Fields Used

Origin Field
Normalized Schema metadata_deviceEventId
Normalized Schema metadata_product
Normalized Schema metadata_vendor
Normalized Schema user_username