avatar

SigmaHQ Detections

@sigmaHQ
12 followers122,468 downloads2,593 copies16 likes160,483 views

6,800 detections

Detects the creation of a new office macro files on the systems
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
7 months ago
002
Detects when an application is modified or deleted.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
7 months ago
102
Detects when an Okta end-user reports activity by their account as being potentially suspicious.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
7 months ago
102
Detects Bitbucket global SSH access configuration changes.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
7 months ago
301
Detects changes to the bitbucket audit log configuration.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
7 months ago
001
Detects when a secret scanning allowlist rule is added for projects.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
7 months ago
001
Detects when a repository is exempted from secret scanning feature.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
7 months ago
001
Detects when a user creates action secret for the organization, environment, codespaces or repository.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
7 months ago
001
Detects when a modification (create, update or replace) action is taken that affects mutating or validating webhook configurations, as they can be used by an adversary to achieve persistence or exfiltrate access credentials.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
7 months ago
001
Detects instances where an SSH service on an OpenCanary node has had a login attempt.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
7 months ago
001
Page 61 of 680