User Added To Group With CA Policy Modification Access (91c95675-1f27-46d0-bead-d1ae96b97cd3)

Monitor and alert on group membership additions of groups that have CA policy modification access

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Modify Authentication Process - T1556 (f4c1826f-a322-41cd-9557-562100848c84)	Attack Pattern	User Added To Group With CA Policy Modification Access (91c95675-1f27-46d0-bead-d1ae96b97cd3)	Sigma-Rules	1
Abuse Elevation Control Mechanism - T1548 (67720091-eee3-4d2d-ae16-8264567f6f5b)	Attack Pattern	User Added To Group With CA Policy Modification Access (91c95675-1f27-46d0-bead-d1ae96b97cd3)	Sigma-Rules	1