Anvilogic high experimental other

Snowflake Create Role [snowflake-database_query_history]

Create a new role or replace an existing role in the system.

View Source

Detection Logic

select * from snowflake.account_usage.query_history where event_time > dateadd(hour, -2, sysdate()) and signature ilike 'create_role' and query ilike 'create%role%'

Field Validations

Loading…

Comments (0)

Loading comments...