LoFP / t1554

t1554

Title	Tags
legitimate use of azure hybrid connection manager and the azure service bus service	t1554 windows sigma
legitimate use of hybrid connection manager via azure function apps.	t1554 windows sigma
updates to approved and trusted ssh executables can trigger this rule.	t1554 t1556 linux elastic