Rule Library
Sigma Rules
3 rules found for "Corissa Koopmans"
3,731Total
3,132Detection
457Emerging
139Hunting
Detectionmediumtest
CA Policy Removed by Non Approved Actor
Monitor and alert on conditional access changes where non approved actor removed CA Policy.
Azureauditlogs
Corissa KoopmansTue Jul 19cloud
Detectionmediumtest
CA Policy Updated by Non Approved Actor
Monitor and alert on conditional access changes. Is Initiated by (actor) approved to make changes? Review Modified Properties and compare "old" vs "new" value.
Azureauditlogs
Corissa KoopmansTue Jul 19cloud
Detectionmediumtest
New CA Policy by Non-approved Actor
Monitor and alert on conditional access changes.
Azureauditlogs
Corissa KoopmansMon Jul 18cloud