Sagan informational stable other

[SALESFORCE] PermissionSetEvent event detected

[SALESFORCE] PermissionSetEvent event detected

View Source

Detection Logic

alert any $HOME_NET any -> $HOME_NET any (msg:"[SALESFORCE] PermissionSetEvent event detected"; program:salesforce_streaming_api_data; json_content:".channel","/event/PermissionSetEvent"; json_content:".data.payload.PermissionType","UserPermission"; json_content:".data.payload.Operation","AssignedToUsers"; classtype:system-event; reference:url,https://developer.salesforce.com/docs/atlas.en-us.platform_events.meta/platform_events/sforce_api_objects_lightningurieventstream.htm; sid:5014053; rev:1;)

Field Validations

Loading…

Comments (0)

Loading comments...