Bitbucket Global SSH Settings Changed

SigmaHQ Detections@sigmaHQ

•updated Nov 3, 2025•0•33

Detects when the global SSH access configuration is changed within Bitbucket. This could indicate an attempt to enable or modify SSH access for malicious purposes, potentially for lateral movement or persistence.