refactor: first bigger log source refactoring
see discussion here: https://github.com/SigmaHQ/sigma/discussions/2835
This commit is contained in:
@@ -8,7 +8,7 @@ references:
|
||||
- https://attack.mitre.org/techniques/T1078
|
||||
logsource:
|
||||
product: azure
|
||||
service: azure.signinlogs
|
||||
service: signinlogs
|
||||
detection:
|
||||
selection:
|
||||
properties.message: Set federation settings on domain
|
||||
|
||||
Reference in New Issue
Block a user