← All Findings
Vendor: Orca Security FIN-620 Weight: Confidence:

What It Detects

MITRE ATT&CK Techniques

Comma-separated, e.g. T1078, T1190

Checks read-only

FieldOperatorValue
Connectors match Orca
Extra_Data and [{'field': 'User Disabled (True/False)', 'value': '1', 'operator': 'match'}, {'field': 'User Groups', 'value': '.*', 'operator': 'match'}]

Remediation

Why It Matters

Export Lucidum