Payroll Pirate: Workday Banking Detail or Direct Deposit Modification
Detects log entries related to sensitive HR and financial data modifications, specifically identifying keywords such as 'Workday', 'direct deposit', 'payment election', or 'bank account' changes. This activity is indicative of potential payroll fraud, where an adversary attempts to redirect employee compensation to an unauthorized account.
Cortex XDR
