Techniques
Sample rules
Account Created And Deleted Within A Close Time Frame
- source: sigma
- technicques:
- t1078
Description
Detects when an account was created and deleted in a short period of time.
Detection logic
condition: selection
selection:
Status: Success
properties.message:
- Add user
- Delete user