Skip to content

Hide Navigation Hide TOC

PIM Approvals And Deny Elevation (039a7469-0296-4450-84c0-f6966b16dc6d)

Detects when a PIM elevation is approved or denied. Outside of normal operations should be investigated.

Cluster A Galaxy A Cluster B Galaxy B Level
PIM Approvals And Deny Elevation (039a7469-0296-4450-84c0-f6966b16dc6d) Sigma-Rules Cloud Accounts - T1078.004 (f232fa7a-025c-4d43-abc7-318e81a73d65) Attack Pattern 1
Valid Accounts - T1078 (b17a1a56-e99c-403c-8948-561df0cffe81) Attack Pattern Cloud Accounts - T1078.004 (f232fa7a-025c-4d43-abc7-318e81a73d65) Attack Pattern 2