Hide Navigation Hide TOC User Added To Privilege Role (49a268a4-72f4-4e38-8a7b-885be690c5b5) Detects when a user is added to a privileged role. Cluster A Galaxy A Cluster B Galaxy B Level User Added To Privilege Role (49a268a4-72f4-4e38-8a7b-885be690c5b5) Sigma-Rules Cloud Accounts - T1078.004 (f232fa7a-025c-4d43-abc7-318e81a73d65) Attack Pattern 1 Valid Accounts - T1078 (b17a1a56-e99c-403c-8948-561df0cffe81) Attack Pattern Cloud Accounts - T1078.004 (f232fa7a-025c-4d43-abc7-318e81a73d65) Attack Pattern 2