JFrog Artifactory access tokens issued since Aug 28 compromise window
Detects JFrog Artifactory access-token issuance events on/after the suspected compromise window (2026-08-28) where the token is tied to the anonymous identity, granted administrator scope, or has no attributable initiating user, per Fastly's remediation guidance.
Microsoft Sentinel (KQL)

