01
detectionlint / library / yara-l

entra_id_application_creation

yara-lApache-2.0from chronicle/detection-rules

Application creation can be legitimate but aren't frequently created. Validating application creation may be appropriate to ensure rogue apps aren't being created.

02
quality98
fp risk—
forks0
views0
rule sourcelocked

Sign in to view the rule source

Free accounts can view the source for the top-ranked rules. Create one in seconds — no credit card required.

Sign in