Detection catalogue

Explore published rules with transparent provenance, licensing, and ATT&CK mappings.

detections

Loading detections…

CYFIRMA - Attack Surface - Configuration Medium Rule

This alert is generated when CYFIRMA detects a critical misconfiguration in a public-facing asset or service. Such misconfigurations may include exposed admin interfaces, default credentials, open directory listings, or insecure protocols, which significantly increase the attack surface."

ATT&CK coverage

Detection requirements

Log source product: cyfirmaattacksurfacealertsconnector
Log source service: cyfirmaasconfigurationalerts_cl

What the source says

Tagged by the source as

CollectionCredentialAccessDefenseEvasionDiscoveryExecutionInitialAccessPersistenceReconnaissance

Detection logic

Published to signed-in readers

The query as its source wrote it, its canonical form, and the content hash that pins this exact revision.