Tag
medium
advisory
Zoom High Video Latency Potentially Indicating Remote Employment Fraud
2 rules 1 TTP 1 IOCThis analytic identifies Zoom users exhibiting high video latency, a potential indicator of Remote Employment Fraud (REF), by analyzing Zoom logs for average and overall latency and highlighting users with latency exceeding 300ms.
Zoom
remote-employment-fraud
identity
2r
1t
1i
high
advisory
Geographic Improbable Location Detection
2 rules 1 TTPDetection of user logins originating from geographically distant locations within a short timeframe, indicative of potential Remote Employment Fraud or compromised credentials.
Workday +6
remote-employment-fraud
credential-compromise
okta
2r
1t