Rule Library
Sigma Rules
2 rules found for "Thomas Detzner"
3,707Total
3,116Detection
451Emerging
137Hunting
Detectionmediumtest
User Added To Group With CA Policy Modification Access
Monitor and alert on group membership additions of groups that have CA policy modification access
Azureauditlogs
TA0004 · Privilege EscalationTA0006 · Credential AccessTA0005 · Defense EvasionTA0003 · Persistence+2
Mark Morowczynski+1Thu Aug 04cloud
Detectionmediumtest
User Removed From Group With CA Policy Modification Access
Monitor and alert on group membership removal of groups that have CA policy modification access
Azureauditlogs
TA0004 · Privilege EscalationTA0006 · Credential AccessTA0005 · Defense EvasionTA0003 · Persistence+2
Mark Morowczynski+1Thu Aug 04cloud