01
detectionlint / library / yara-l

o365_entra_id_app_modify_permission_change_on_watchlist

yara-lApache-2.0from chronicle/detection-rules

Alerts when a permission on the watchlist is applied to an Entra ID application.

02
quality82
fp risk—
forks0
views0
rule sourcelocked

Sign in to view the rule source

Free accounts can view the source for the top-ranked rules. Create one in seconds — no credit card required.

Sign in