Detection rules › By catalog entry

1Password-UserVaultAccess

Catalog entry	Rules
any	3
uva-grant	1
uva-update	1

any

3 detection rules reference this catalog entry. View catalog entry.

Kusto (3)

1Password - Non-privileged vault user permission change severity medium T1098
1Password - Potential insider privilege escalation via vault severity medium T1078
1Password - Privileged vault permission change severity high T1098

uva-grant

1 detection rules reference this catalog entry. View catalog entry.

Kusto (1)

1Password - Secret extraction post vault access change by administrator severity high T1555

uva-update

1 detection rules reference this catalog entry. View catalog entry.

Kusto (1)

1Password - Secret extraction post vault access change by administrator severity high T1555

Back to all 1Password-UserVaultAccess catalog entries