Rule Library
Sigma Rules
5 rules found for "Saw Winn Naung"
3,731Total
3,132Detection
457Emerging
139Hunting
Detectionmediumtest
Number Of Resource Creation Or Deployment Activities
Number of VM creations or deployment activities occur in Azure via the azureactivity log.
Azureactivitylogs
sawwinnnaungThu May 07cloud
Detectionmediumtest
Granting Of Permissions To An Account
Identifies IPs from which users grant access to other users on azure resources and alerts when a previously unseen source IP address is used.
Azureactivitylogs
sawwinnnaungThu May 07cloud
Detectionmediumtest
Rare Subscription-level Operations In Azure
Identifies IPs from which users grant access to other users on azure resources and alerts when a previously unseen source IP address is used.
Azureactivitylogs
sawwinnnaungThu May 07cloud
Detectionlowtest
DNS Events Related To Mining Pools
Identifies clients that may be performing DNS lookups associated with common currency mining pools.
Zeek (Bro)dns
Saw Winn Naung+1Thu Aug 19network
Detectionmediumtest
DNS TOR Proxies
Identifies IPs performing DNS lookups associated with common Tor proxies.
Zeek (Bro)dns
Saw Winn Naung+1Sun Aug 15network