SigmaHQ Detections
@sigmaHQ12 followers122,473 downloads2,593 copies16 likes160,493 views
6,800 detections
Filters
Last updated
All Time
Detection languages
6,800
Categories
2,695
910
506
407
372
Platforms
5,315
505
263
204
164
Products / Services
2,051
1,570
475
423
316
MITRE Techniques
2,652
1,739
1,656
1,503
764
CVEs
19
19
19
16
10
Detects when a user tampers with S3 data management in Amazon Web Services.
Identifies when a key vault is modified or deleted.
Identifies when secrets are modified or deleted in Azure.
Identifies when a Point-to-site VPN is Modified or Deleted.
Identifies when a Virtual Network is modified or deleted in Azure.
Detects when highly privileged delegated permissions are granted on behalf of all users
End User Consent
Sigma
Detects when an end user consents to an application
Detects when end user consent is blocked due to risk-based consent.
Detects when a new owner is added to an application. This gives that account privileges to make modifications and configuration changes to the application.
Detects when administrator grants either application permissions (app roles) or highly privileged delegated permissions
Page 602 of 680