SigmaHQ Detections
@sigmaHQ12 followers122,429 downloads2,472 copies16 likes159,581 views
6,797 detections
Filters
Last updated
All Time
Detection languages
6,797
Categories
2,695
910
506
407
372
Platforms
5,313
505
263
203
164
Products / Services
2,050
1,570
475
423
316
MITRE Techniques
2,652
1,738
1,655
1,502
764
CVEs
19
19
19
16
10
Detects when a user tampers with S3 data management in Amazon Web Services.
Identifies when a key vault is modified or deleted.
Identifies when secrets are modified or deleted in Azure.
Identifies when a Point-to-site VPN is Modified or Deleted.
Identifies when a VPN connection is modified or deleted.
End User Consent
Sigma
Detects when an end user consents to an application
Detects when end user consent is blocked due to risk-based consent.
Detects when a new owner is added to an application. This gives that account privileges to make modifications and configuration changes to the application.
Detects when an application is granted delegated or app role permissions for Microsoft Graph, Exchange, Sharepoint, or Azure AD
Detects when administrator grants either application permissions (app roles) or highly privileged delegated permissions
Page 604 of 680