Detection rules › By catalog entry

AWS-workmail

Catalog entry	Rules
CreateGroup	1
CreateOrganization	1
CreateUser	1
DeleteGroup	1
DeleteUser	1
RegisterToWorkMail	1
ResetPassword	1

CreateGroup

1 detection rules reference this catalog entry. View catalog entry.

Kusto (1)

High-Risk Cross-Cloud User Impersonation severity medium T1078,T1078.002,T1078.004,T1134

CreateOrganization

1 detection rules reference this catalog entry. View catalog entry.

Kusto (1)

High-Risk Cross-Cloud User Impersonation severity medium T1078,T1078.002,T1078.004,T1134

CreateUser

1 detection rules reference this catalog entry. View catalog entry.

Kusto (1)

High-Risk Cross-Cloud User Impersonation severity medium T1078,T1078.002,T1078.004,T1134

DeleteGroup

1 detection rules reference this catalog entry. View catalog entry.

Kusto (1)

High-Risk Cross-Cloud User Impersonation severity medium T1078,T1078.002,T1078.004,T1134

DeleteUser

1 detection rules reference this catalog entry. View catalog entry.

Kusto (1)

High-Risk Cross-Cloud User Impersonation severity medium T1078,T1078.002,T1078.004,T1134

RegisterToWorkMail

1 detection rules reference this catalog entry. View catalog entry.

Kusto (1)

High-Risk Cross-Cloud User Impersonation severity medium T1078,T1078.002,T1078.004,T1134

ResetPassword

1 detection rules reference this catalog entry. View catalog entry.

Kusto (1)

High-Risk Cross-Cloud User Impersonation severity medium T1078,T1078.002,T1078.004,T1134

Back to all AWS-workmail catalog entries