security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
43f657ac4e7f586b6d2e04cfa8e2b3cb6502737b
sigma-rules/rules/azure
T
History
David French 43f657ac4e [New Rule] User Added as Owner for Azure Application (#191) 
* new-rule-user-added-as-owner-for-azure-application

* Update rule name and description

* Update rules/azure/defense_evasion_user_added_as_owner_for_azure_application.toml

Update query to remove superfluous quotes

Co-authored-by: Justin Ibarra <brokensound77@users.noreply.github.com>

* Update rules/azure/defense_evasion_user_added_as_owner_for_azure_application.toml

Co-authored-by: Andrew Pease <7442091+peasead@users.noreply.github.com>

* Add ATT&CK metadata to rule

Co-authored-by: Justin Ibarra <brokensound77@users.noreply.github.com>
Co-authored-by: Andrew Pease <7442091+peasead@users.noreply.github.com>
2020-09-03 12:15:33 -06:00
..
persistence_azure_automation_account_created.toml
[New Rule] Azure Automation Account Created (#177)
2020-09-03 11:08:38 -06:00
persistence_azure_automation_runbook_created_or_modified.toml
[New Rule] Azure Automation Runbook Created or Modified (#178)
2020-09-03 11:16:42 -06:00
persistence_azure_automation_webhook_created.toml
[New Rule] Azure Automation Webhook Created (#179)
2020-09-03 11:20:50 -06:00
persistence_user_added_as_owner_for_azure_application.toml
[New Rule] User Added as Owner for Azure Application (#191)
2020-09-03 12:15:33 -06:00