Anomalous amount of Salesforce records deleted

salesforce

Classification:

attack

Tactic:

TA0040-impact

Technique:

T1485-data-destruction

Set up the salesforce integration.

Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel, n'hésitez pas à nous contacter.

Goal

Detect when there is a significant increase in deleted records in Salesforce.

Strategy

Inspect and baseline Salesforce logs and determine if there is a significant increase in successful (@evt.outcome:Success) delete operations (@operation:Delete).

Triage and response

Determine if the user should be legitimately deleting Salesforce records.