Bitbucket User Login Failure Via SSH

SigmaHQ Detections@sigmaHQ

•updated Nov 3, 2025•0•0•0

Detects SSH user login access failures. Please note that this rule can be noisy and is recommended to use with correlation based on "author.name" field.