User Geolocation Logon Pattern Analysis

Monitoring geolocation data of user logon attempts and comparing it to a baseline user behavior profile to identify anomalies in logon location.

ID: D3-UGLPA
Subclasses: 
Artifacts:  Network Traffic
Tactic:

Informational References

https://d3fend.mitre.org/technique/d3f:UserGeolocationLogonPatternAnalysis/

Countermeasures

ID Name Description NIST Rev5 D3FEND ISO 27001

Related SPARTA Techniques and Sub-Techniques

ID Name Description

Space Threats Mapped

ID Description

Sample Requirements

Requirement Rationale/Additional Guidance/Notes