Skip to content

Hide Navigation Hide TOC

Bitbucket User Login Failure Via SSH (d3f90469-fb05-42ce-b67d-0fded91bbef3)

Detects SSH user login access failures. Please note that this rule can be noisy and is recommended to use with correlation based on "author.name" field.

Cluster A Galaxy A Cluster B Galaxy B Level
Bitbucket User Login Failure Via SSH (d3f90469-fb05-42ce-b67d-0fded91bbef3) Sigma-Rules SSH - T1021.004 (2db31dcd-54da-405d-acef-b9129b816ed6) Attack Pattern 1
Bitbucket User Login Failure Via SSH (d3f90469-fb05-42ce-b67d-0fded91bbef3) Sigma-Rules Brute Force - T1110 (a93494bb-4b80-4ea1-8695-3236a49916fd) Attack Pattern 1
SSH - T1021.004 (2db31dcd-54da-405d-acef-b9129b816ed6) Attack Pattern Remote Services - T1021 (54a649ff-439a-41a4-9856-8d144a2551ba) Attack Pattern 2