Roles Assigned Outside PIM (b1bc08d1-8224-4758-a0e6-fbcfc98c73bb)
Identifies when a privilege role assignment has taken place outside of PIM and may indicate an attack.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Roles Assigned Outside PIM (b1bc08d1-8224-4758-a0e6-fbcfc98c73bb) | Sigma-Rules | Valid Accounts - T1078 (b17a1a56-e99c-403c-8948-561df0cffe81) | Attack Pattern | 1 |