01
detectionlint / library / yara-l

ms_graph_group_members_enumeration

yara-lApache-2.0from chronicle/detection-rules

Identify the enumeration of members within groups in Entra ID. This is based on GraphRunner Get-SecurityGroups function behavior so modifications may be needed for other scenarios

02
quality98
fp risk—
forks0
views0
rule sourcelocked

Sign in to view the rule source

Free accounts can view the source for the top-ranked rules. Create one in seconds — no credit card required.

Sign in