Anvilogic high experimental other

Snowflake User Creation [snowflake-database_query_history]

Creates a new user or replaces an existing user in the system.

View Source

Detection Logic

select * from snowflake.account_usage.query_history where event_time > dateadd(hour, -2, sysdate()) and signature ilike 'create_user' and query ilike 'create%user%'

Field Validations

Loading…

Comments (0)

Loading comments...