Possible brute force attempted against user

This rule is part of a beta feature. To learn more, contact Support.

Classification:

attack

Tactic:

Technique:

このページは日本語には対応しておりません。随時翻訳に取り組んでいます。
翻訳に関してご質問やご意見ございましたら、お気軽にご連絡ください。

Goal

Detect when a user attempts to access the OCI console an anomalous amount of times.

This rule monitors OCI to detect the 404 error message.

Determine if {{@user.name}} should be attempting to use the identified API calls: {{@evt.name}}.
Contact the user to see if they intended to make these API calls.
If the user did not make the API calls:
- Rotate the credentials.
- Investigate which unauthorized API calls might have succeeded throughout the rest of the environment.