FIREWALL-RULE-MODIFICATION

FIREWALL-RULE-MODIFICATIONFirewall Rule Modification

ATT&CK
14.1

Description

Changes made to a firewall rule, typically to allow/block specific network traffic (ex: Windows EID 4950 or Write/Delete entries within Azure Firewall Rule Collection Activity Logs)

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Data component
Firewall Disable
Data component
Group Modification
Data component
Windows Registry Key Modification
Data component
Active Directory Object Modification
Data component
Cloud Service Modification
Data component
User Account Modification
Sourced from MITRE ATT&CK Enterprise 14.1. Curated by Adam Lundqvist, SQUR.