Axonius

Telemetry Evidence

These values show how indexed rules identify Axonius telemetry.

Axonius API Key Reset source low: Detects an Axonius API Key Reset
Axonius External User Added source low: Detects when an external user is added in Axonius
Axonius login from Tor IP source medium: Detects an Axonius login from Tor IP address
Axonius Too Many Failed Logins source medium: Detects too many failed Axonius login attempts, which may indicate a brute-force attack
Axonius Webhook Created source low: Detects when an Axonius Webhook is Created