Azure AD Multi-Source Failed Authentications Spike
Compromise Accounts, Cloud Accounts, Brute Force, Password Spraying, Credential Stuffing
Resource Development
Azure AD Multi-Source Failed Authentications Spike
Compromise Accounts, Cloud Accounts, Brute Force, Password Spraying, Credential Stuffing
ASL AWS Multi-Factor Authentication Disabled
Compromise Accounts, Cloud Accounts, Multi-Factor Authentication Request Generation, Modify Authentication Process, Multi-Factor Authentication
ASL AWS Multi-Factor Authentication Disabled
Compromise Accounts, Cloud Accounts, Multi-Factor Authentication Request Generation, Modify Authentication Process, Multi-Factor Authentication
AWS Successful Console Authentication From Multiple IPs
Compromise Accounts, Unused/Unsupported Cloud Regions
GCP Multiple Failed MFA Requests For User
Compromise Accounts, Cloud Accounts, Multi-Factor Authentication Request Generation, Valid Accounts, Cloud Accounts
GCP Multiple Failed MFA Requests For User
Compromise Accounts, Cloud Accounts, Multi-Factor Authentication Request Generation, Valid Accounts, Cloud Accounts
GCP Unusual Number of Failed Authentications From Ip
Compromise Accounts, Cloud Accounts, Brute Force, Password Spraying, Credential Stuffing
GCP Unusual Number of Failed Authentications From Ip
Compromise Accounts, Cloud Accounts, Brute Force, Password Spraying, Credential Stuffing
GCP Multiple Users Failing To Authenticate From Ip
Compromise Accounts, Cloud Accounts, Brute Force, Password Spraying, Credential Stuffing
GCP Multiple Users Failing To Authenticate From Ip
Compromise Accounts, Cloud Accounts, Brute Force, Password Spraying, Credential Stuffing
GCP Multi-Factor Authentication Disabled
Compromise Accounts, Cloud Accounts, Modify Authentication Process, Multi-Factor Authentication
GCP Multi-Factor Authentication Disabled
Compromise Accounts, Cloud Accounts, Modify Authentication Process, Multi-Factor Authentication
GCP Successful Single-Factor Authentication
Compromise Accounts, Cloud Accounts, Valid Accounts, Cloud Accounts
GCP Successful Single-Factor Authentication
Compromise Accounts, Cloud Accounts, Valid Accounts, Cloud Accounts
GCP Authentication Failed During MFA Challenge
Compromise Accounts, Cloud Accounts, Valid Accounts, Cloud Accounts, Multi-Factor Authentication Request Generation
GCP Authentication Failed During MFA Challenge
Compromise Accounts, Cloud Accounts, Valid Accounts, Cloud Accounts, Multi-Factor Authentication Request Generation
AWS Successful Single-Factor Authentication
Compromise Accounts, Cloud Accounts, Valid Accounts, Cloud Accounts
AWS Successful Single-Factor Authentication
Compromise Accounts, Cloud Accounts, Valid Accounts, Cloud Accounts
AWS Multi-Factor Authentication Disabled
Compromise Accounts, Cloud Accounts, Multi-Factor Authentication Request Generation, Modify Authentication Process, Multi-Factor Authentication
AWS Multi-Factor Authentication Disabled
Compromise Accounts, Cloud Accounts, Multi-Factor Authentication Request Generation, Modify Authentication Process, Multi-Factor Authentication
AWS Console Login Failed During MFA Challenge
Compromise Accounts, Cloud Accounts, Multi-Factor Authentication Request Generation
AWS Console Login Failed During MFA Challenge
Compromise Accounts, Cloud Accounts, Multi-Factor Authentication Request Generation
AWS Multiple Failed MFA Requests For User
Compromise Accounts, Cloud Accounts, Multi-Factor Authentication Request Generation
AWS Multiple Failed MFA Requests For User
Compromise Accounts, Cloud Accounts, Multi-Factor Authentication Request Generation
AWS Unusual Number of Failed Authentications From Ip
Compromise Accounts, Cloud Accounts, Brute Force, Password Spraying, Credential Stuffing
AWS Unusual Number of Failed Authentications From Ip
Compromise Accounts, Cloud Accounts, Brute Force, Password Spraying, Credential Stuffing
Detect AWS Console Login by User from New Region
Compromise Accounts, Cloud Accounts, Unused/Unsupported Cloud Regions
Detect AWS Console Login by User from New Region
Compromise Accounts, Cloud Accounts, Unused/Unsupported Cloud Regions
Detect AWS Console Login by User from New Country
Compromise Accounts, Cloud Accounts, Unused/Unsupported Cloud Regions
Detect AWS Console Login by User from New Country
Compromise Accounts, Cloud Accounts, Unused/Unsupported Cloud Regions
Azure AD Multiple Failed MFA Requests For User
Compromise Accounts, Cloud Accounts, Multi-Factor Authentication Request Generation, Valid Accounts, Cloud Accounts
Azure AD Multiple Failed MFA Requests For User
Compromise Accounts, Cloud Accounts, Multi-Factor Authentication Request Generation, Valid Accounts, Cloud Accounts
Detect AWS Console Login by User from New City
Compromise Accounts, Cloud Accounts, Unused/Unsupported Cloud Regions
Detect AWS Console Login by User from New City
Compromise Accounts, Cloud Accounts, Unused/Unsupported Cloud Regions
AWS Credential Access GetPasswordData
Compromise Accounts, Cloud Accounts, Brute Force, Password Guessing
AWS Credential Access GetPasswordData
Compromise Accounts, Cloud Accounts, Brute Force, Password Guessing
Azure AD Multi-Factor Authentication Disabled
Compromise Accounts, Cloud Accounts, Modify Authentication Process, Multi-Factor Authentication
Azure AD Multi-Factor Authentication Disabled
Compromise Accounts, Cloud Accounts, Modify Authentication Process, Multi-Factor Authentication
AWS Credential Access Failed Login
Compromise Accounts, Cloud Accounts, Brute Force, Password Guessing
AWS Credential Access Failed Login
Compromise Accounts, Cloud Accounts, Brute Force, Password Guessing
AWS Credential Access RDS Password reset
Compromise Accounts, Cloud Accounts, Brute Force
AWS Credential Access RDS Password reset
Compromise Accounts, Cloud Accounts, Brute Force
Azure AD Authentication Failed During MFA Challenge
Compromise Accounts, Cloud Accounts, Valid Accounts, Cloud Accounts, Multi-Factor Authentication Request Generation
Azure AD Authentication Failed During MFA Challenge
Compromise Accounts, Cloud Accounts, Valid Accounts, Cloud Accounts, Multi-Factor Authentication Request Generation
Azure AD Successful PowerShell Authentication
Compromise Accounts, Cloud Accounts, Valid Accounts, Cloud Accounts
Azure AD Successful PowerShell Authentication
Compromise Accounts, Cloud Accounts, Valid Accounts, Cloud Accounts
Azure AD Successful Single-Factor Authentication
Compromise Accounts, Cloud Accounts, Valid Accounts, Cloud Accounts
Azure AD Successful Single-Factor Authentication
Compromise Accounts, Cloud Accounts, Valid Accounts, Cloud Accounts
Azure AD Multiple Users Failing To Authenticate From Ip
Compromise Accounts, Cloud Accounts, Brute Force, Password Spraying, Credential Stuffing
Azure AD Multiple Users Failing To Authenticate From Ip
Compromise Accounts, Cloud Accounts, Brute Force, Password Spraying, Credential Stuffing
Azure AD Unusual Number of Failed Authentications From Ip
Compromise Accounts, Cloud Accounts, Brute Force, Password Spraying, Credential Stuffing
Azure AD Unusual Number of Failed Authentications From Ip
Compromise Accounts, Cloud Accounts, Brute Force, Password Spraying, Credential Stuffing
Azure Active Directory High Risk Sign-in
Compromise Accounts, Cloud Accounts, Brute Force, Password Spraying
Azure Active Directory High Risk Sign-in
Compromise Accounts, Cloud Accounts, Brute Force, Password Spraying
Splunk protocol impersonation weak encryption selfsigned
Digital Certificates
Splunk Digital Certificates Infrastructure Version
Digital Certificates
Splunk Digital Certificates Lack of Encryption
Digital Certificates
Splunk protocol impersonation weak encryption simplerequest
Digital Certificates
Detect AWS Console Login by New User
Compromise Accounts, Cloud Accounts, Unsecured Credentials
Detect AWS Console Login by New User
Compromise Accounts, Cloud Accounts, Unsecured Credentials