1200KM / tag
auditlogs — logsource-service tag
36 related reference pages for logsource-service: auditlogs.
Meaning and evidence boundary
Navigation membership is based on explicit metadata in this pinned module, not a claim of detection effectiveness or live validation.
Related pages
- Account Created And Deleted Within A Close Time Frame · sigma-rule
- Added Credentials to Existing Application · sigma-rule
- Added Owner To Application · sigma-rule
- App Assigned To Azure RBAC/Microsoft Entra Role · sigma-rule
- App Granted Microsoft Permissions · sigma-rule
- App Granted Privileged Delegated Or App Permissions · sigma-rule
- Application AppID Uri Configuration Changes · sigma-rule
- Application URI Configuration Changes · sigma-rule
- Azure Domain Federation Settings Modified · sigma-rule
- Azure Subscription Permission Elevation Via AuditLogs · sigma-rule
- Bitlocker Key Retrieval · sigma-rule
- Bulk Deletion Changes To Privileged Account Permissions · sigma-rule
- CA Policy Removed by Non Approved Actor · sigma-rule
- CA Policy Updated by Non Approved Actor · sigma-rule
- Certificate-Based Authentication Enabled · sigma-rule
- Change to Authentication Method · sigma-rule
- Changes to Device Registration Policy · sigma-rule
- Changes To PIM Settings · sigma-rule
- Delegated Permissions Granted For All Users · sigma-rule
- End User Consent · sigma-rule
- End User Consent Blocked · sigma-rule
- Guest User Invited By Non Approved Inviters · sigma-rule
- Guest Users Invited To Tenant By Non Approved Inviters · sigma-rule
- New CA Policy by Non-approved Actor · sigma-rule
- New Root Certificate Authority Added · sigma-rule
- Password Reset By User Account · sigma-rule
- PIM Alert Setting Changes To Disabled · sigma-rule
- PIM Approvals And Deny Elevation · sigma-rule
- Privileged Account Creation · sigma-rule
- Temporary Access Pass Added To An Account · sigma-rule
- User Added To Group With CA Policy Modification Access · sigma-rule
- User Added To Privilege Role · sigma-rule
- User Removed From Group With CA Policy Modification Access · sigma-rule
- User State Changed From Guest To Member · sigma-rule
- Users Added to Global or Device Admin Roles · sigma-rule
- Windows LAPS Credential Dump From Entra ID · sigma-rule
Connected ecosystem references
Pinned research references. No browser attack runner, live simulation result or validated detector is asserted. Source mappings and validation limits are preserved. ATT&CK / Atomic provenance · Detection provenance.