BOLA – Broken Object Level Authorization
An adversary changes an object identifier in an API request and gains access to data or operations belonging to another user, account, or tenant.
BOPLA – Broken Object Property Level Authorization
An API exposes or allows modification of sensitive object properties that the user should not access, including excessive data exposure and mass assignment.
BFLA – Broken Function Level Authorization
A regular or unauthenticated user invokes an administrative or privileged API function that should not be available to them.
Threat Intelligence
Threat Intelligence in Security Operations: practical explanation, selection criteria, and SecTec portfolio orientation.
UEBA
UEBA in Security Operations: practical explanation, selection criteria, and SecTec portfolio orientation.