Detection rules › By event

1Password-GroupMembership

Event	Rules
any	1
gm-join	1

any

1 detection rules reference this event. View event page.

Kusto (1)

1Password - Potential insider privilege escalation via group severity medium T1078

gm-join

1 detection rules reference this event. View event page.

Kusto (1)

1Password - User added to privileged group severity medium T1098