Essential information

Value / Name

login.principal.user.email

Confidence

100/100

Revoked

No

Valid from

01/10/2025 14:13

Valid until

05/09/2026 22:56

Pattern type

stix

Published

21/12/2025 16:58

Modified

26/02/2026 20:16

Author / Source

AlienVault

Description

No description.

Pattern

[hostname:value = 'login.principal.user.email']

Labels / Tags

Labels: access control connected apps data exfiltration data loader detection identity verification logging multi-factor authentication salesforce social engineering voice phishing

Marking (TLP)

TLP:CLEAR