mirror of
https://github.com/valitydev/SigmaHQ.git
synced 2024-11-06 17:35:19 +00:00
Update azure_federation_modified.yml
This commit is contained in:
parent
6025df63ee
commit
e6e3fc2eec
@ -7,7 +7,7 @@ date: 2021/09/06
|
||||
references:
|
||||
- https://attack.mitre.org/techniques/T1078/
|
||||
logsource:
|
||||
service: azure.activitylogs
|
||||
service: azure.signinlogs
|
||||
detection:
|
||||
selection:
|
||||
properties.message: Set federation settings on domain
|
||||
|
Loading…
Reference in New Issue
Block a user