Rule Library
Sigma Rules
6 rules found for "Michael Epping"
3,731Total
3,132Detection
457Emerging
139Hunting
Detectionmediumtest
Bitlocker Key Retrieval
Monitor and alert for Bitlocker key retrieval.
Azureauditlogs
Michael EppingTue Jun 28cloud
Detectionhightest
Changes to Device Registration Policy
Monitor and alert for changes to the device registration policy.
Azureauditlogs
Michael EppingTue Jun 28cloud
Detectionhightest
Users Added to Global or Device Admin Roles
Monitor and alert for users added to device admin roles.
Azureauditlogs
Michael EppingTue Jun 28cloud
Detectionmediumtest
Device Registration or Join Without MFA
Monitor and alert for device registration or join events where MFA was not performed.
Azuresigninlogs
Michael EppingTue Jun 28cloud
Detectionhightest
Sign-ins from Non-Compliant Devices
Monitor and alert for sign-ins where the device was non-compliant.
Azuresigninlogs
Michael EppingTue Jun 28cloud
Detectionlowtest
Sign-ins by Unknown Devices
Monitor and alert for Sign-ins by unknown devices from non-Trusted locations.
Azuresigninlogs
Michael EppingTue Jun 28cloud