Search results

[New] Microsoft Entra ID Protection Alert and Device Registration

backport: auto

Domain: Cloud

Domain: Cloud Workloads

Integration: Azureazure related rulesazure related rules

Integration: Microsoft 365

patch

Rule: NewProposal for new ruleProposal for new rule

Status: Open (in progress).

elastic/detection-rulesnumber 4688

#4688 In elastic/detection-rules;

· Samirbous opened on Apr 30, 2025

[Meta] Explore Microsoft Graph Activity Logs for Detections

backlog

Domain: Cloud Workloads

Integration: Azureazure related rulesazure related rules

Meta

Team: TRADE

Status: Open.

#3645 In elastic/detection-rules;

· terrancedejesus opened on May 4, 2024

[Meta] Midnight Blizzard (APT29) Azure TTPs Rule Coverage

backlog

Domain: Cloud Workloads

Integration: Azureazure related rulesazure related rules

Meta

Team: TRADE

Status: Open.

Task

#3412 In elastic/detection-rules;

· terrancedejesus opened on Jan 30, 2024

[New Rule] Successful Azure AD MFA fatigue attack

backlog

community

Domain: Cloud Workloads

Integration: Azureazure related rulesazure related rules

Rule: NewProposal for new ruleProposal for new rule

Status: Open.

#2440 In elastic/detection-rules;

· MichalMarchewka opened on Dec 26, 2022

[New Rule] Azure AD Multiple MFA Sign-in Failures For Single User

backlog

community

Domain: Cloud Workloads

Integration: Azureazure related rulesazure related rules

Rule: NewProposal for new ruleProposal for new rule

Status: Open.

#2317 In elastic/detection-rules;

· MichalMarchewka opened on Sep 21, 2022

[New Rule] Azure Kubernetes Secret or Config Object Access

backlog

community

Domain: Cloud Workloads

Integration: Azureazure related rulesazure related rules

Rule: NewProposal for new ruleProposal for new rule

v8.3.0Rules for 8.3.0Rules for 8.3.0

Status: Open.

#1412 In elastic/detection-rules;

· austinsonger opened on Aug 7, 2021

[New Rule] Azure Kubernetes Role or ClusterRole Modified or Deleted

backlog

community

Domain: Cloud Workloads

Integration: Azureazure related rulesazure related rules

Rule: NewProposal for new ruleProposal for new rule

Status: Open.

#1278 In elastic/detection-rules;

· austinsonger opened on Jun 8, 2021

[New Rule] Azure Modify Trusted Domains

backlog

Domain: Cloud Workloads

Integration: Azureazure related rulesazure related rules

Rule: NewProposal for new ruleProposal for new rule

v7.14.07.14 rules release package7.14 rules release package

Status: Open.

#888 In elastic/detection-rules;

· bm11100 opened on Jan 20, 2021