Panther medium experimental python
Snowflake user with key-based auth logged in with password auth
Detect when a user that has key-based authentication configured logs in with a password
Detection Logic
def rule(_):
return True
def title(event):
return f"User {event.get('name')} logged in with Password instead of RSA key" Field Validations
Loading…
Comments (0)
Loading comments...