Skip to content

Latest commit

 

History

History
475 lines (302 loc) · 26.4 KB

references_o.md

File metadata and controls

475 lines (302 loc) · 26.4 KB

Sigma rule references as PDF

okta_admin_activity_from_proxy_query

Title : Okta Admin Functions Access Through Proxy

Rule id : 9058ca8b-f397-4fd1-a9fa-2b7aad4d6309

Url Pdf
https://www.beyondtrust.com/blog/entry/okta-support-unit-breach pdf/782c5a380278accce1f9cea9e37889330a41645f3c9401a81b7909145ce5bfeb.pdf
https://dataconomy.com/2023/10/23/okta-data-breach/ pdf/6caa083a33082202883d0c0fc5ef65bf9200366fd4fb7c16af04fa0a1caf2efd.pdf
https://blog.cloudflare.com/how-cloudflare-mitigated-yet-another-okta-compromise/ pdf/2b4f708b2b6895047208437aee4a6ab9792ac1318e236e1d0ce571b0f2247bf5.pdf

okta_admin_role_assigned_to_user_or_group

Title : Okta Admin Role Assigned to an User or Group

Rule id : 413d4a81-6c98-4479-9863-014785fd579c

Url Pdf
https://developer.okta.com/docs/reference/api/system-log/ pdf/ef556414c376c3a182bffe9f5179e0a8abc9c45ebce006dbc327987e3373c215.pdf
https://developer.okta.com/docs/reference/api/event-types/ pdf/eda05bc7af3ed5987b1ab7aeac035b795c6f32fa956692478a003aa1ce163758.pdf

okta_admin_role_assignment_created

Title : Okta Admin Role Assignment Created

Rule id : 139bdd4b-9cd7-49ba-a2f4-744d0a8f5d8c

Url Pdf
https://developer.okta.com/docs/reference/api/system-log/ pdf/ef556414c376c3a182bffe9f5179e0a8abc9c45ebce006dbc327987e3373c215.pdf
https://developer.okta.com/docs/reference/api/event-types/ pdf/eda05bc7af3ed5987b1ab7aeac035b795c6f32fa956692478a003aa1ce163758.pdf

okta_api_token_created

Title : Okta API Token Created

Rule id : 19951c21-229d-4ccb-8774-b993c3ff3c5c

Url Pdf
https://developer.okta.com/docs/reference/api/system-log/ pdf/ef556414c376c3a182bffe9f5179e0a8abc9c45ebce006dbc327987e3373c215.pdf
https://developer.okta.com/docs/reference/api/event-types/ pdf/eda05bc7af3ed5987b1ab7aeac035b795c6f32fa956692478a003aa1ce163758.pdf

okta_api_token_revoked

Title : Okta API Token Revoked

Rule id : cf1dbc6b-6205-41b4-9b88-a83980d2255b

Url Pdf
https://developer.okta.com/docs/reference/api/system-log/ pdf/ef556414c376c3a182bffe9f5179e0a8abc9c45ebce006dbc327987e3373c215.pdf
https://developer.okta.com/docs/reference/api/event-types/ pdf/eda05bc7af3ed5987b1ab7aeac035b795c6f32fa956692478a003aa1ce163758.pdf

okta_application_modified_or_deleted

Title : Okta Application Modified or Deleted

Rule id : 7899144b-e416-4c28-b0b5-ab8f9e0a541d

Url Pdf
https://developer.okta.com/docs/reference/api/system-log/ pdf/ef556414c376c3a182bffe9f5179e0a8abc9c45ebce006dbc327987e3373c215.pdf
https://developer.okta.com/docs/reference/api/event-types/ pdf/eda05bc7af3ed5987b1ab7aeac035b795c6f32fa956692478a003aa1ce163758.pdf

okta_application_sign_on_policy_modified_or_deleted

Title : Okta Application Sign-On Policy Modified or Deleted

Rule id : 8f668cc4-c18e-45fe-ad00-624a981cf88a

Url Pdf
https://developer.okta.com/docs/reference/api/system-log/ pdf/ef556414c376c3a182bffe9f5179e0a8abc9c45ebce006dbc327987e3373c215.pdf
https://developer.okta.com/docs/reference/api/event-types/ pdf/eda05bc7af3ed5987b1ab7aeac035b795c6f32fa956692478a003aa1ce163758.pdf

okta_apt_suspicious_user_creation

Title : Okta 2023 Breach Indicator Of Compromise

Rule id : 00a8e92a-776b-425f-80f2-82d8f8fab2e5

Url Pdf
https://www.beyondtrust.com/blog/entry/okta-support-unit-breach pdf/782c5a380278accce1f9cea9e37889330a41645f3c9401a81b7909145ce5bfeb.pdf
https://developer.okta.com/docs/reference/api/event-types/ pdf/eda05bc7af3ed5987b1ab7aeac035b795c6f32fa956692478a003aa1ce163758.pdf

okta_fastpass_phishing_detection

Title : Okta FastPass Phishing Detection

Rule id : ee39a9f7-5a79-4b0a-9815-d36b3cf28d3e

Url Pdf
https://sec.okta.com/fastpassphishingdetection pdf/5864f362fb8e6f42ed11b69346a292e71a5d2d545b812039bd795612e4563a7e.pdf
https://developer.okta.com/docs/reference/api/system-log/ pdf/ef556414c376c3a182bffe9f5179e0a8abc9c45ebce006dbc327987e3373c215.pdf
https://developer.okta.com/docs/reference/api/event-types/ pdf/eda05bc7af3ed5987b1ab7aeac035b795c6f32fa956692478a003aa1ce163758.pdf

okta_identity_provider_created

Title : Okta Identity Provider Created

Rule id : 969c7590-8c19-4797-8c1b-23155de6e7ac

Url Pdf
https://developer.okta.com/docs/reference/api/system-log/ pdf/ef556414c376c3a182bffe9f5179e0a8abc9c45ebce006dbc327987e3373c215.pdf
https://sec.okta.com/articles/2023/08/cross-tenant-impersonation-prevention-and-detection pdf/33849b9a0643e4e2a3189ad184be5f5f1f244a3ff196b85a69339a8b6507c4fa.pdf

okta_mfa_reset_or_deactivated

Title : Okta MFA Reset or Deactivated

Rule id : 50e068d7-1e6b-4054-87e5-0a592c40c7e0

Url Pdf
https://developer.okta.com/docs/reference/api/system-log/ pdf/ef556414c376c3a182bffe9f5179e0a8abc9c45ebce006dbc327987e3373c215.pdf
https://developer.okta.com/docs/reference/api/event-types/ pdf/eda05bc7af3ed5987b1ab7aeac035b795c6f32fa956692478a003aa1ce163758.pdf

okta_network_zone_deactivated_or_deleted

Title : Okta Network Zone Deactivated or Deleted

Rule id : 9f308120-69ed-4506-abde-ac6da81f4310

Url Pdf
https://developer.okta.com/docs/reference/api/system-log/ pdf/ef556414c376c3a182bffe9f5179e0a8abc9c45ebce006dbc327987e3373c215.pdf
https://developer.okta.com/docs/reference/api/event-types/ pdf/eda05bc7af3ed5987b1ab7aeac035b795c6f32fa956692478a003aa1ce163758.pdf

okta_new_behaviours_admin_console

Title : Okta New Admin Console Behaviours

Rule id : a0b38b70-3cb5-484b-a4eb-c4d8e7bcc0a9

Url Pdf
https://developer.okta.com/docs/reference/api/system-log/ pdf/ef556414c376c3a182bffe9f5179e0a8abc9c45ebce006dbc327987e3373c215.pdf
https://sec.okta.com/articles/2023/08/cross-tenant-impersonation-prevention-and-detection pdf/33849b9a0643e4e2a3189ad184be5f5f1f244a3ff196b85a69339a8b6507c4fa.pdf

okta_password_health_report_query

Title : Okta Password Health Report Query

Rule id : 0d58814b-1660-4d31-8c93-d1086ed24cba

Url Pdf
https://www.beyondtrust.com/blog/entry/okta-support-unit-breach pdf/782c5a380278accce1f9cea9e37889330a41645f3c9401a81b7909145ce5bfeb.pdf

okta_password_in_alternateid_field

Title : Potential Okta Password in AlternateID Field

Rule id : 91b76b84-8589-47aa-9605-c837583b82a9

Url Pdf
https://developer.okta.com/docs/reference/api/system-log/ pdf/ef556414c376c3a182bffe9f5179e0a8abc9c45ebce006dbc327987e3373c215.pdf
https://www.mitiga.io/blog/how-okta-passwords-can-be-compromised-uncovering-a-risk-to-user-data pdf/358db9e9ab72984a3260a7177acf7b54672cf62d4c5a564232b5fb145d74c88c.pdf
https://help.okta.com/en-us/Content/Topics/users-groups-profiles/usgp-create-character-restriction.htm pdf/c26fa4ff59a367b43cf6e0e9f4b7c52f1e617cec991d7e37883cc740c934103c.pdf

okta_policy_modified_or_deleted

Title : Okta Policy Modified or Deleted

Rule id : 1667a172-ed4c-463c-9969-efd92195319a

Url Pdf
https://developer.okta.com/docs/reference/api/system-log/ pdf/ef556414c376c3a182bffe9f5179e0a8abc9c45ebce006dbc327987e3373c215.pdf
https://developer.okta.com/docs/reference/api/event-types/ pdf/eda05bc7af3ed5987b1ab7aeac035b795c6f32fa956692478a003aa1ce163758.pdf

okta_policy_rule_modified_or_deleted

Title : Okta Policy Rule Modified or Deleted

Rule id : 0c97c1d3-4057-45c9-b148-1de94b631931

Url Pdf
https://developer.okta.com/docs/reference/api/system-log/ pdf/ef556414c376c3a182bffe9f5179e0a8abc9c45ebce006dbc327987e3373c215.pdf
https://developer.okta.com/docs/reference/api/event-types/ pdf/eda05bc7af3ed5987b1ab7aeac035b795c6f32fa956692478a003aa1ce163758.pdf

okta_security_threat_detected

Title : Okta Security Threat Detected

Rule id : 5c82f0b9-3c6d-477f-a318-0e14a1df73e0

Url Pdf
https://okta.github.io/okta-help/en/prod/Content/Topics/Security/threat-insight/configure-threatinsight-system-log.htm pdf/8fcd2891fe54e0418c66ce561d2445e36fa954e010fb616b33e1f9bea6104356.pdf
https://developer.okta.com/docs/reference/api/system-log/ pdf/ef556414c376c3a182bffe9f5179e0a8abc9c45ebce006dbc327987e3373c215.pdf
https://developer.okta.com/docs/reference/api/event-types/ pdf/eda05bc7af3ed5987b1ab7aeac035b795c6f32fa956692478a003aa1ce163758.pdf

okta_suspicious_activity_enduser_report

Title : Okta Suspicious Activity Reported by End-user

Rule id : 07e97cc6-aed1-43ae-9081-b3470d2367f1

Url Pdf
https://developer.okta.com/docs/reference/api/system-log/ pdf/ef556414c376c3a182bffe9f5179e0a8abc9c45ebce006dbc327987e3373c215.pdf
https://github.com/okta/workflows-templates/blob/master/workflows/suspicious_activity_reported/readme.md pdf/816076edbcda6246868a238ed5d7f680399414fb24b78ad3370b5e54cafa8b8a.pdf

okta_unauthorized_access_to_app

Title : Okta Unauthorized Access to App

Rule id : 6cc2b61b-d97e-42ef-a9dd-8aa8dc951657

Url Pdf
https://developer.okta.com/docs/reference/api/system-log/ pdf/ef556414c376c3a182bffe9f5179e0a8abc9c45ebce006dbc327987e3373c215.pdf
https://developer.okta.com/docs/reference/api/event-types/ pdf/eda05bc7af3ed5987b1ab7aeac035b795c6f32fa956692478a003aa1ce163758.pdf

okta_user_account_locked_out

Title : Okta User Account Locked Out

Rule id : 14701da0-4b0f-4ee6-9c95-2ffb4e73bb9a

Url Pdf
https://developer.okta.com/docs/reference/api/system-log/ pdf/ef556414c376c3a182bffe9f5179e0a8abc9c45ebce006dbc327987e3373c215.pdf
https://developer.okta.com/docs/reference/api/event-types/ pdf/eda05bc7af3ed5987b1ab7aeac035b795c6f32fa956692478a003aa1ce163758.pdf

okta_user_created

Title : New Okta User Created

Rule id : b6c718dd-8f53-4b9f-98d8-93fdca966969

Url Pdf
https://developer.okta.com/docs/reference/api/event-types/ pdf/eda05bc7af3ed5987b1ab7aeac035b795c6f32fa956692478a003aa1ce163758.pdf

okta_user_session_start_via_anonymised_proxy

Title : Okta User Session Start Via An Anonymising Proxy Service

Rule id : bde30855-5c53-4c18-ae90-1ff79ebc9578

Url Pdf
https://developer.okta.com/docs/reference/api/system-log/ pdf/ef556414c376c3a182bffe9f5179e0a8abc9c45ebce006dbc327987e3373c215.pdf
https://sec.okta.com/articles/2023/08/cross-tenant-impersonation-prevention-and-detection pdf/33849b9a0643e4e2a3189ad184be5f5f1f244a3ff196b85a69339a8b6507c4fa.pdf

onelogin_assumed_another_user

Title : OneLogin User Assumed Another User

Rule id : 62fff148-278d-497e-8ecd-ad6083231a35

Url Pdf
https://developers.onelogin.com/api-docs/1/events/event-resource pdf/5342c4a24f913a390695f3901511c4fe1d739e9ed65a23d3d1a0e96ffd7fc2a0.pdf

onelogin_user_account_locked

Title : OneLogin User Account Locked

Rule id : a717c561-d117-437e-b2d9-0118a7035d01

Url Pdf
https://developers.onelogin.com/api-docs/1/events/event-resource/ pdf/7ab9688cbbaa50c5086379525d1e0cf50f38f2c1da0593064b49e50d76766a72.pdf

opencanary_ftp_login_attempt

Title : OpenCanary - FTP Login Attempt

Rule id : 6991bc2b-ae2e-447f-bc55-3a1ba04c14e5

Url Pdf
https://opencanary.readthedocs.io/en/latest/starting/configuration.html#services-configuration pdf/d9d0599975ee26311a23e9a15ca3b1a0190489762b586a18b6ae9a025ea5d38f.pdf
https://github.com/thinkst/opencanary/blob/a0896adfcaf0328cfd5829fe10d2878c7445138e/opencanary/logger.py#L52 pdf/4bdbfb5cbcf37cc41b7e60f52dc70e2d353a16d5261a6800a2aaca3445dfdc47.pdf

opencanary_git_clone_request

Title : OpenCanary - GIT Clone Request

Rule id : 4fe17521-aef3-4e6a-9d6b-4a7c8de155a8

Url Pdf
https://opencanary.readthedocs.io/en/latest/starting/configuration.html#services-configuration pdf/d9d0599975ee26311a23e9a15ca3b1a0190489762b586a18b6ae9a025ea5d38f.pdf
https://github.com/thinkst/opencanary/blob/a0896adfcaf0328cfd5829fe10d2878c7445138e/opencanary/logger.py#L52 pdf/4bdbfb5cbcf37cc41b7e60f52dc70e2d353a16d5261a6800a2aaca3445dfdc47.pdf

opencanary_http_get

Title : OpenCanary - HTTP GET Request

Rule id : af6c3078-84cd-4c68-8842-08b76bd81b13

Url Pdf
https://opencanary.readthedocs.io/en/latest/starting/configuration.html#services-configuration pdf/d9d0599975ee26311a23e9a15ca3b1a0190489762b586a18b6ae9a025ea5d38f.pdf
https://github.com/thinkst/opencanary/blob/a0896adfcaf0328cfd5829fe10d2878c7445138e/opencanary/logger.py#L52 pdf/4bdbfb5cbcf37cc41b7e60f52dc70e2d353a16d5261a6800a2aaca3445dfdc47.pdf

opencanary_http_post_login_attempt

Title : OpenCanary - HTTP POST Login Attempt

Rule id : af1ac430-df6b-4b38-b976-0b52f07a0252

Url Pdf
https://opencanary.readthedocs.io/en/latest/starting/configuration.html#services-configuration pdf/d9d0599975ee26311a23e9a15ca3b1a0190489762b586a18b6ae9a025ea5d38f.pdf
https://github.com/thinkst/opencanary/blob/a0896adfcaf0328cfd5829fe10d2878c7445138e/opencanary/logger.py#L52 pdf/4bdbfb5cbcf37cc41b7e60f52dc70e2d353a16d5261a6800a2aaca3445dfdc47.pdf

opencanary_httpproxy_login_attempt

Title : OpenCanary - HTTPPROXY Login Attempt

Rule id : 5498fc09-adc6-4804-b9d9-5cca1f0b8760

Url Pdf
https://opencanary.readthedocs.io/en/latest/starting/configuration.html#services-configuration pdf/d9d0599975ee26311a23e9a15ca3b1a0190489762b586a18b6ae9a025ea5d38f.pdf
https://github.com/thinkst/opencanary/blob/a0896adfcaf0328cfd5829fe10d2878c7445138e/opencanary/logger.py#L52 pdf/4bdbfb5cbcf37cc41b7e60f52dc70e2d353a16d5261a6800a2aaca3445dfdc47.pdf

opencanary_mssql_login_sqlauth

Title : OpenCanary - MSSQL Login Attempt Via SQLAuth

Rule id : 3ec9a16d-0b4f-4967-9542-ebf38ceac7dd

Url Pdf
https://opencanary.readthedocs.io/en/latest/starting/configuration.html#services-configuration pdf/d9d0599975ee26311a23e9a15ca3b1a0190489762b586a18b6ae9a025ea5d38f.pdf
https://github.com/thinkst/opencanary/blob/a0896adfcaf0328cfd5829fe10d2878c7445138e/opencanary/logger.py#L52 pdf/4bdbfb5cbcf37cc41b7e60f52dc70e2d353a16d5261a6800a2aaca3445dfdc47.pdf

opencanary_mssql_login_winauth

Title : OpenCanary - MSSQL Login Attempt Via Windows Authentication

Rule id : 6e78f90f-0043-4a01-ac41-f97681613a66

Url Pdf
https://opencanary.readthedocs.io/en/latest/starting/configuration.html#services-configuration pdf/d9d0599975ee26311a23e9a15ca3b1a0190489762b586a18b6ae9a025ea5d38f.pdf
https://github.com/thinkst/opencanary/blob/a0896adfcaf0328cfd5829fe10d2878c7445138e/opencanary/logger.py#L52 pdf/4bdbfb5cbcf37cc41b7e60f52dc70e2d353a16d5261a6800a2aaca3445dfdc47.pdf

opencanary_mysql_login_attempt

Title : OpenCanary - MySQL Login Attempt

Rule id : e7d79a1b-25ed-4956-bd56-bd344fa8fd06

Url Pdf
https://opencanary.readthedocs.io/en/latest/starting/configuration.html#services-configuration pdf/d9d0599975ee26311a23e9a15ca3b1a0190489762b586a18b6ae9a025ea5d38f.pdf
https://github.com/thinkst/opencanary/blob/a0896adfcaf0328cfd5829fe10d2878c7445138e/opencanary/logger.py#L52 pdf/4bdbfb5cbcf37cc41b7e60f52dc70e2d353a16d5261a6800a2aaca3445dfdc47.pdf

opencanary_ntp_monlist

Title : OpenCanary - NTP Monlist Request

Rule id : 7cded4b3-f09e-405a-b96f-24248433ba44

Url Pdf
https://opencanary.readthedocs.io/en/latest/starting/configuration.html#services-configuration pdf/d9d0599975ee26311a23e9a15ca3b1a0190489762b586a18b6ae9a025ea5d38f.pdf
https://github.com/thinkst/opencanary/blob/a0896adfcaf0328cfd5829fe10d2878c7445138e/opencanary/logger.py#L52 pdf/4bdbfb5cbcf37cc41b7e60f52dc70e2d353a16d5261a6800a2aaca3445dfdc47.pdf

opencanary_redis_command

Title : OpenCanary - REDIS Action Command Attempt

Rule id : 547dfc53-ebf6-4afe-8d2e-793d9574975d

Url Pdf
https://opencanary.readthedocs.io/en/latest/starting/configuration.html#services-configuration pdf/d9d0599975ee26311a23e9a15ca3b1a0190489762b586a18b6ae9a025ea5d38f.pdf
https://github.com/thinkst/opencanary/blob/a0896adfcaf0328cfd5829fe10d2878c7445138e/opencanary/logger.py#L52 pdf/4bdbfb5cbcf37cc41b7e60f52dc70e2d353a16d5261a6800a2aaca3445dfdc47.pdf

opencanary_sip_request

Title : OpenCanary - SIP Request

Rule id : e30de276-68ec-435c-ab99-ef3befec6c61

Url Pdf
https://opencanary.readthedocs.io/en/latest/starting/configuration.html#services-configuration pdf/d9d0599975ee26311a23e9a15ca3b1a0190489762b586a18b6ae9a025ea5d38f.pdf
https://github.com/thinkst/opencanary/blob/a0896adfcaf0328cfd5829fe10d2878c7445138e/opencanary/logger.py#L52 pdf/4bdbfb5cbcf37cc41b7e60f52dc70e2d353a16d5261a6800a2aaca3445dfdc47.pdf

opencanary_smb_file_open

Title : OpenCanary - SMB File Open Request

Rule id : 22777c9e-873a-4b49-855f-6072ab861a52

Url Pdf
https://opencanary.readthedocs.io/en/latest/starting/configuration.html#services-configuration pdf/d9d0599975ee26311a23e9a15ca3b1a0190489762b586a18b6ae9a025ea5d38f.pdf
https://github.com/thinkst/opencanary/blob/a0896adfcaf0328cfd5829fe10d2878c7445138e/opencanary/logger.py#L52 pdf/4bdbfb5cbcf37cc41b7e60f52dc70e2d353a16d5261a6800a2aaca3445dfdc47.pdf

opencanary_snmp_cmd

Title : OpenCanary - SNMP OID Request

Rule id : e9856028-fd4e-46e6-b3d1-10f7ceb95078

Url Pdf
https://opencanary.readthedocs.io/en/latest/starting/configuration.html#services-configuration pdf/d9d0599975ee26311a23e9a15ca3b1a0190489762b586a18b6ae9a025ea5d38f.pdf
https://github.com/thinkst/opencanary/blob/a0896adfcaf0328cfd5829fe10d2878c7445138e/opencanary/logger.py#L52 pdf/4bdbfb5cbcf37cc41b7e60f52dc70e2d353a16d5261a6800a2aaca3445dfdc47.pdf

opencanary_ssh_login_attempt

Title : OpenCanary - SSH Login Attempt

Rule id : ff7139bc-fdb1-4437-92f2-6afefe8884cb

Url Pdf
https://opencanary.readthedocs.io/en/latest/starting/configuration.html#services-configuration pdf/d9d0599975ee26311a23e9a15ca3b1a0190489762b586a18b6ae9a025ea5d38f.pdf
https://github.com/thinkst/opencanary/blob/a0896adfcaf0328cfd5829fe10d2878c7445138e/opencanary/logger.py#L52 pdf/4bdbfb5cbcf37cc41b7e60f52dc70e2d353a16d5261a6800a2aaca3445dfdc47.pdf

opencanary_ssh_new_connection

Title : OpenCanary - SSH New Connection Attempt

Rule id : cd55f721-5623-4663-bd9b-5229cab5237d

Url Pdf
https://opencanary.readthedocs.io/en/latest/starting/configuration.html#services-configuration pdf/d9d0599975ee26311a23e9a15ca3b1a0190489762b586a18b6ae9a025ea5d38f.pdf
https://github.com/thinkst/opencanary/blob/a0896adfcaf0328cfd5829fe10d2878c7445138e/opencanary/logger.py#L52 pdf/4bdbfb5cbcf37cc41b7e60f52dc70e2d353a16d5261a6800a2aaca3445dfdc47.pdf

opencanary_telnet_login_attempt

Title : OpenCanary - Telnet Login Attempt

Rule id : 512cff7a-683a-43ad-afe0-dd398e872f36

Url Pdf
https://opencanary.readthedocs.io/en/latest/starting/configuration.html#services-configuration pdf/d9d0599975ee26311a23e9a15ca3b1a0190489762b586a18b6ae9a025ea5d38f.pdf
https://github.com/thinkst/opencanary/blob/a0896adfcaf0328cfd5829fe10d2878c7445138e/opencanary/logger.py#L52 pdf/4bdbfb5cbcf37cc41b7e60f52dc70e2d353a16d5261a6800a2aaca3445dfdc47.pdf

opencanary_tftp_request

Title : OpenCanary - TFTP Request

Rule id : b4e6b016-a2ac-4759-ad85-8000b300d61e

Url Pdf
https://opencanary.readthedocs.io/en/latest/starting/configuration.html#services-configuration pdf/d9d0599975ee26311a23e9a15ca3b1a0190489762b586a18b6ae9a025ea5d38f.pdf
https://github.com/thinkst/opencanary/blob/a0896adfcaf0328cfd5829fe10d2878c7445138e/opencanary/logger.py#L52 pdf/4bdbfb5cbcf37cc41b7e60f52dc70e2d353a16d5261a6800a2aaca3445dfdc47.pdf

opencanary_vnc_connection_attempt

Title : OpenCanary - VNC Connection Attempt

Rule id : 9db5446c-b44a-4291-8b89-fcab5609c3b3

Url Pdf
https://opencanary.readthedocs.io/en/latest/starting/configuration.html#services-configuration pdf/d9d0599975ee26311a23e9a15ca3b1a0190489762b586a18b6ae9a025ea5d38f.pdf
https://github.com/thinkst/opencanary/blob/a0896adfcaf0328cfd5829fe10d2878c7445138e/opencanary/logger.py#L52 pdf/4bdbfb5cbcf37cc41b7e60f52dc70e2d353a16d5261a6800a2aaca3445dfdc47.pdf