Temporary Access Pass Added To An Account (fa84aaf5-8142-43cd-9ec2-78cfebf878ce)

Detects when a temporary access pass (TAP) is added to an account. TAPs added to priv accounts should be investigated

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Cloud Accounts - T1078.004 (f232fa7a-025c-4d43-abc7-318e81a73d65)	Attack Pattern	Temporary Access Pass Added To An Account (fa84aaf5-8142-43cd-9ec2-78cfebf878ce)	Sigma-Rules	1
Valid Accounts - T1078 (b17a1a56-e99c-403c-8948-561df0cffe81)	Attack Pattern	Cloud Accounts - T1078.004 (f232fa7a-025c-4d43-abc7-318e81a73d65)	Attack Pattern	2