Update azure_creating_number_of_resources_detection.yml

Added tactic and MITRE reference for technique.
2023-01-09 15:35:00 -05:00
parent 8e38593f2f
commit 1c0c29f45f
1 changed files with 2 additions and 0 deletions
@@ -4,10 +4,12 @@ status: test
 description: Number of VM creations or deployment activities occur in Azure via the azureactivity log.
 references:
    - https://github.com/Azure/Azure-Sentinel/blob/e534407884b1ec5371efc9f76ead282176c9e8bb/Detections/AzureActivity/Creating_Anomalous_Number_Of_Resources_detection.yaml
+    - https://attack.mitre.org/techniques/T1098/
 author: sawwinnnaung
 date: 2020/05/07
 modified: 2021/11/27
 tags:
+    - attack.persistence
    - attack.t1098
 logsource:
    product: azure