Sagan informational stable other

[AIRTABLES] changeGroupMemberRole event detected

[AIRTABLES] changeGroupMemberRole event detected

View Source

Detection Logic

alert any $HOME_NET any -> $HOME_NET any (msg:"[AIRTABLES] changeGroupMemberRole event detected"; program:airtable_audit_log_data; json_content:".action","changeGroupMemberRole"; json_map: "src_ip",".origin.ipAddress"; classtype:system-event; reference:url,airtable.com/developers/web/api/audit-log-event-types; sid:5013605; rev:2;)

Field Validations

Loading…

Comments (0)

Loading comments...