Techniques
Sample rules
Measurable Increase Of Successful Authentications
- source: sigma
- technicques:
- t1078
Description
Detects when successful sign-ins increased by 10% or greater.
Detection logic
condition: selection
selection:
Count: <10%
Status: Success