Search and filter across all detection sources
475 rules
Snowflake User Created
Detect new users created in snowflake
Detect new users created in Snowflake.
Snowflake Login Without MFA
Detect snowflake logins without multifactor authentication
Detect Snowflake logins without multifactor authentication
Snowflake Successful Login
Track successful login signals for correlation.
Snowflake Create Integration [snowflake-database_query_history]
Creates a new integration in the system or replaces an existing integration. An integration is a Snowflake object that provides an interface between Snowflake and third-party services.
Snowflake Create Network Policy [snowflake-database_query_history]
Creates a network policy.
Snowflake USE ROLE ACCOUNTADMIN Database Query [snowflake-database_query_history]
Detects when a Snowflake user attempts to elevate their permissions to the ACCOUNTADMIN role.
Snowflake Account Admin Granted
Detect when account admin is granted.
Snowflake User Enabled
Detect users being re-enabled in your environment
Snowflake Alter Integration [snowflake-database_query_history]
Modifies the properties for an existing integration.
Snowflake Create Account [snowflake-database_query_history]
Creates a new account in your organization.
Snowflake Drop User [snowflake-database_query_history]
Removes the specified user from the system.
Snowflake Temporary Stage Created
A temporary stage was created.
Detects users being re-enabled in your environment.
Snowflake Alter Network Policy [snowflake-database_query_history]
Modifies the properties for an existing network policy.
Snowflake Drop Network Policy [snowflake-database_query_history]
Removes the specified network policy from the system.
Snowflake File Downloaded
A file was downloaded from a stage.
Suspicious Snowflake Sessions - Unusual Application
Detects unusual (non-common) applications and client characteristics that have been used to connect to a Snowflake account
Snowflake Table Copied Into Stage
A table was copied into a stage.
Snowflake Create Role [snowflake-database_query_history]
Create a new role or replace an existing role in the system.
Snowflake User Creation [snowflake-database_query_history]
Creates a new user or replaces an existing user in the system.
Snowflake Client IP
Monitor for malicious IPs interacting with Snowflake as part of ongoing cyber threat activity reported May 31st, 2024
Snowflake - Unusual query
'Detects unusual query.'