Search results

[Hunt Tuning] Entra ID Device Code Phishing / Update Drifted Docs

Domain: Cloud

Domain: Identity

Hunt: Tuning

Integration: AWSAWS related rulesAWS related rules

Integration: Azureazure related rulesazure related rules

Status: Open.

#5935 In elastic/detection-rules;

· terrancedejesus opened on Apr 8, 2026

[Meta] Explore Microsoft Graph Activity Logs for Detections

backlog

Domain: Cloud Workloads

Integration: Azureazure related rulesazure related rules

Meta

Team: TRADE

Status: Open.

#3645 In elastic/detection-rules;

· terrancedejesus opened on May 4, 2024

[Meta] Midnight Blizzard (APT29) Azure TTPs Rule Coverage

backlog

Domain: Cloud Workloads

Integration: Azureazure related rulesazure related rules

Meta

Team: TRADE

Status: Open.

Task

#3412 In elastic/detection-rules;

· terrancedejesus opened on Jan 30, 2024

[New Rule] Successful Azure AD MFA fatigue attack

backlog

community

Domain: Cloud Workloads

Integration: Azureazure related rulesazure related rules

Rule: NewProposal for new ruleProposal for new rule

Status: Open.

#2440 In elastic/detection-rules;

· MichalMarchewka opened on Dec 26, 2022

[New Rule] Azure AD Multiple MFA Sign-in Failures For Single User

backlog

community

Domain: Cloud Workloads

Integration: Azureazure related rulesazure related rules

Rule: NewProposal for new ruleProposal for new rule

Status: Open.

#2317 In elastic/detection-rules;

· MichalMarchewka opened on Sep 21, 2022