Browse Rules

Search and filter across all detection sources

83 rules

panther low python

Box Access Granted

A user granted access to their box account to Box technical support from account settings.

sagan medium other

[BOX] New user created

[BOX] New user created
sagan medium other

[BOX] Suspicious File Uploaded

[BOX] Suspicious File Uploaded
sagan unknown other

[BOX] Device Trust check failed

[BOX] Device Trust check failed
sagan critical other

[BOX] File marked as malicious

[BOX] File marked as malicious
sagan medium other

[DYNAMIC] Box API Logs Detected

[DYNAMIC] Box API Logs Detected
panther low python

Box Content Workflow Policy Violation

A user violated the content workflow policy.

panther medium python

Box event triggered by unknown or external user

An external user has triggered a box enterprise event.

sublime medium mql

Brand impersonation: Box file sharing service

Detects messages impersonating Box file sharing service by identifying Box logos, collaboration-related language, or Box company address information from senders not associated with the legitimate box.com domain.
sagan medium other

[BOX] A group admin is created

[BOX] A group admin is created
sagan medium other

[BOX] A watermarked file is downloaded

[BOX] A watermarked file is downloaded
sagan unknown other

[BOX] Multifactor authentication has been disabled

[BOX] Multifactor authentication has been disabled
sagan medium other

[BOX] Successful Login After Brute Force

[BOX] Successful Login After Brute Force
panther high python

Box Shield Suspicious Alert Triggered

A user login event or session event was tagged as medium to high severity by Box Shield.

panther informational python

Box New Login

A user logged in from a new device.

panther high python

Malicious Content Detected

Box has detect malicious content, such as a virus.

sagan medium other

[BOX] A new group has been created

[BOX] A new group has been created
sagan medium other

[BOX] Files Copied in Excess (100/5Mins)

[BOX] Files Copied in Excess (100/5Mins)
sagan medium other

[BOX] Files Deleted in Excess (50/5Mins)

[BOX] Files Deleted in Excess (50/5Mins)
sagan medium other

[BOX] Files Downloaded in Excess (50/5Mins)

[BOX] Files Downloaded in Excess (50/5Mins)
sagan medium other

[BOX] Successful Login from Outside HOME_COUNTRY

[BOX] Successful Login from Outside HOME_COUNTRY
panther informational python

Box Untrusted Device Login

A user attempted to login from an untrusted device.

sagan medium other

[BOX] Access to a shared link is blocked

[BOX] Access to a shared link is blocked
sagan medium other

[BOX] Access to an external collaboration is blocked

[BOX] Access to an external collaboration is blocked
sagan medium other

[BOX] An invite to externally collaborate is blocked

[BOX] An invite to externally collaborate is blocked