audit | Detection.FYI

Bitbucket Audit Log Configuration Updated

Aug 12, 2024 · attack.defense-evasion attack.t1562.001 ·
Share on:

Detects changes to the bitbucket audit log configuration.

Read More
Bitbucket Full Data Export Triggered

Aug 12, 2024 · attack.collection attack.t1213.003 ·
Share on:

Detects when full data export is attempted.

Read More
Bitbucket Global Permission Changed

Aug 12, 2024 · attack.persistence attack.privilege-escalation attack.t1098 ·
Share on:

Detects global permissions change activity.

Read More
Bitbucket Global Secret Scanning Rule Deleted

Aug 12, 2024 · attack.defense-evasion attack.t1562.001 ·
Share on:

Detects Bitbucket global secret scanning rule deletion activity.

Read More
Bitbucket Global SSH Settings Changed

Aug 12, 2024 · attack.lateral-movement attack.defense-evasion attack.t1562.001 attack.t1021.004 ·
Share on:

Detects Bitbucket global SSH access configuration changes.

Read More
Bitbucket Project Secret Scanning Allowlist Added

Aug 12, 2024 · attack.defense-evasion attack.t1562.001 ·
Share on:

Detects when a secret scanning allowlist rule is added for projects.

Read More
Bitbucket Secret Scanning Exempt Repository Added

Aug 12, 2024 · attack.defense-evasion attack.t1562.001 ·
Share on:

Detects when a repository is exempted from secret scanning feature.

Read More
Bitbucket Secret Scanning Rule Deleted

Aug 12, 2024 · attack.defense-evasion attack.t1562.001 ·
Share on:

Detects when secret scanning rule is deleted for the project or repository.

Read More
Bitbucket Unauthorized Access To A Resource

Aug 12, 2024 · attack.resource-development attack.t1586 ·
Share on:

Detects unauthorized access attempts to a resource.

Read More
Bitbucket Unauthorized Full Data Export Triggered

Aug 12, 2024 · attack.collection attack.resource-development attack.t1213.003 attack.t1586 ·
Share on:

Detects when full data export is attempted an unauthorized user.

Read More
Bitbucket User Details Export Attempt Detected

Aug 12, 2024 · attack.collection attack.reconnaissance attack.discovery attack.t1213 attack.t1082 attack.t1591.004 ·
Share on:

Detects user data export activity.

Read More
Bitbucket User Login Failure

Aug 12, 2024 · attack.defense-evasion attack.credential-access attack.t1078.004 attack.t1110 ·
Share on:

Detects user authentication failure events. Please note that this rule can be noisy and it is recommended to use with correlation based on "author.name" field.

Read More
Bitbucket User Login Failure Via SSH

Aug 12, 2024 · attack.t1021.004 attack.t1110 ·
Share on:

Detects SSH user login access failures. Please note that this rule can be noisy and is recommended to use with correlation based on "author.name" field.

Read More
Bitbucket User Permissions Export Attempt

Aug 12, 2024 · attack.reconnaissance attack.t1213 attack.t1082 attack.t1591.004 ·
Share on:

Detects user permission data export attempt.

Read More