A Security-Enabled Global Group Was Deleted (b237c54b-0f15-4612-a819-44b735e0de27)
Detects activity when a security-enabled global group is deleted
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Account Manipulation - T1098 (a10641f4-87b4-45a3-a906-92a149cb2c27) | Attack Pattern | A Security-Enabled Global Group Was Deleted (b237c54b-0f15-4612-a819-44b735e0de27) | Sigma-Rules | 1 |