https://detection.fyi/tags/attack.t1686.001/ Recent content in attack.t1686.001 on Detection.FYI Hugo -- gohugo.io Tue, 28 Apr 2026 23:20:23 +0000 https://detection.fyi/sigmahq/sigma/cloud/azure/activity_logs/azure_firewall_modified_or_deleted/ Tue, 28 Apr 2026 23:20:23 +0000 https://detection.fyi/sigmahq/sigma/cloud/azure/activity_logs/azure_firewall_modified_or_deleted/ Identifies when a firewall is created, modified, or deleted. https://detection.fyi/sigmahq/sigma/cloud/azure/activity_logs/azure_firewall_rule_collection_modified_or_deleted/ Tue, 28 Apr 2026 23:20:23 +0000 https://detection.fyi/sigmahq/sigma/cloud/azure/activity_logs/azure_firewall_rule_collection_modified_or_deleted/ Identifies when Rule Collections (Application, NAT, and Network) is being modified or deleted. https://detection.fyi/sigmahq/sigma/cloud/azure/activity_logs/azure_network_firewall_policy_modified_or_deleted/ Tue, 28 Apr 2026 23:20:23 +0000 https://detection.fyi/sigmahq/sigma/cloud/azure/activity_logs/azure_network_firewall_policy_modified_or_deleted/ Identifies when a Firewall Policy is Modified or Deleted. https://detection.fyi/sigmahq/sigma/cloud/aws/cloudtrail/aws_cloudtrail_new_acl_entries/ Tue, 28 Apr 2026 23:20:23 +0000 https://detection.fyi/sigmahq/sigma/cloud/aws/cloudtrail/aws_cloudtrail_new_acl_entries/ Detects that network ACL entries have been added to a route table which could indicate that new attack vectors have been opened up in the AWS account. https://detection.fyi/sigmahq/sigma/cloud/aws/cloudtrail/aws_cloudtrail_new_route_added/ Tue, 28 Apr 2026 23:20:23 +0000 https://detection.fyi/sigmahq/sigma/cloud/aws/cloudtrail/aws_cloudtrail_new_route_added/ Detects the addition of a new network route to a route table in AWS.