cd
Toggle Menu
whoami
detection
blog
tags
Detections tagged with
T1562.007
Jan 3, 2025
2025-01-03: Azure Activity - Public Access Enabled on Storage Account
#KQL
#Sentinel
#Azure Storage Account
#Misconfiguration
#T1562.007
#T1530
Jan 4, 2025
2025-01-04: Azure Activity - New IP Address Added to Storage Account Firewall
#KQL
#Sentinel
#Azure Storage Account
#T1562.007
#T1530
Jan 6, 2025
2025-01-06: Azure Key Vault - New IP Address Added to Key Vault Firewall
#KQL
#Sentinel
#Azure Key Vault
#T1562.007
#T1555.006
Jan 16, 2025
AWS VPC - Changes to Inbound Rules Allowing Management Ports
#KQL
#Sentinel
#AWS CloudTrail
#AWS VPC
#T1562.007
Jan 17, 2025
AWS S3 - Changes to Block Public Access Settings
#KQL
#Sentinel
#AWS CloudTrail
#AWS S3
#T1562.007
Jan 18, 2025
Azure NSG - Changes to Inbound Rules Allowing Management Ports
#KQL
#Sentinel
#Azure NSG
#T1562.007