1200KM / tag
attack.t1078.004 — sigma-tag tag
40 related reference pages for sigma-tag: attack.t1078.004.
Meaning and evidence boundary
Navigation membership is based on explicit metadata in this pinned module, not a claim of detection effectiveness or live validation.
Related pages
- Account Disabled or Blocked for Sign in Attempts · sigma-rule
- Application AppID Uri Configuration Changes · sigma-rule
- Application URI Configuration Changes · sigma-rule
- AWS IAM S3Browser LoginProfile Creation · sigma-rule
- AWS IAM S3Browser Templated S3 Bucket Policy Creation · sigma-rule
- AWS IAM S3Browser User or AccessKey Creation · sigma-rule
- AWS Root Credentials · sigma-rule
- AWS SAML Provider Deletion Activity · sigma-rule
- AWS Successful Console Login Without MFA · sigma-rule
- Azure AD Only Single Factor Authentication Required · sigma-rule
- Azure Subscription Permission Elevation Via ActivityLogs · sigma-rule
- Bitbucket User Login Failure · sigma-rule
- Bitlocker Key Retrieval · sigma-rule
- Changes To PIM Settings · sigma-rule
- Device Registration or Join Without MFA · sigma-rule
- Failed Authentications From Countries You Do Not Operate Out Of · sigma-rule
- Github New Secret Created · sigma-rule
- Github Self Hosted Runner Changes Detected · sigma-rule
- Github SSH Certificate Configuration Changed · sigma-rule
- Guest User Invited By Non Approved Inviters · sigma-rule
- Login to Disabled Account · sigma-rule
- Multifactor Authentication Denied · sigma-rule
- Multifactor Authentication Interrupted · sigma-rule
- Okta New Admin Console Behaviours · sigma-rule
- Password Reset By User Account · sigma-rule
- PIM Approvals And Deny Elevation · sigma-rule
- Potential MFA Bypass Using Legacy Client Authentication · sigma-rule
- Privileged Account Creation · sigma-rule
- Sign-in Failure Due to Conditional Access Requirements Not Met · sigma-rule
- Sign-ins by Unknown Devices · sigma-rule
- Sign-ins from Non-Compliant Devices · sigma-rule
- Successful Authentications From Countries You Do Not Operate Out Of · sigma-rule
- Suspicious Login Activity Classified By Google · sigma-rule
- Temporary Access Pass Added To An Account · sigma-rule
- Use of Legacy Authentication Protocols · sigma-rule
- User Access Blocked by Azure Conditional Access · sigma-rule
- User Added To Privilege Role · sigma-rule
- User State Changed From Guest To Member · sigma-rule
- Users Added to Global or Device Admin Roles · sigma-rule
- Users Authenticating To Other Azure AD Tenants · sigma-rule
Connected ecosystem references
Pinned research references. No browser attack runner, live simulation result or validated detector is asserted. Source mappings and validation limits are preserved. ATT&CK / Atomic provenance · Detection provenance.