Panther informational experimental python

Snowflake Successful Login

Track successful login signals for correlation.

View Source

Detection Logic

def rule(event):
    return all((event.get("EVENT_TYPE") == "LOGIN", event.get("IS_SUCCESS") == "YES"))

Field Validations

Loading…

Comments (0)

Loading comments...