Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

150 detections

Detects the modification of an EC2 snapshot's permissions to enable access from another account
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
2 years ago
203
Detects when a user tampers with S3 data management in Amazon Web Services.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
2 years ago
001
Detects when a Microsoft Cloud App Security reported when a user or IP address uses an app that is not sanctioned to perform an activity that resembles an attempt to exfiltrate information from your organization.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
2 years ago
001
Page 8 of 8