Alibaba ActionTrail - Multiple Unauthorized Action Attempts Detected By a User Alerts

This trigger is responsible for handling 'Alibaba ActionTrail - multiple unauthorized action_attempts detected by a user' alerts

Alibaba Action Trail

Details

IDabfa084a92abfb031de08b57b3f78ec8
Runs PlaybookAlibaba ActionTrail - multiple unauthorized action_attempts detected by a user
Suggestion ReasonRecommended for multiple unauthorized action_attempts detected by a user related alerts

Alert conditions (all must match)

Field Operator Value
alert_name EQ Alibaba ActionTrail - multiple unauthorized action attempts detected by a user

Source

Trigger_-Alibaba_ActionTrail_-_Multiple_Unauthorized_Action_Attempts_Detected_By_a_User.json
Download History Raw 
{
  "trigger_id": "abfa084a92abfb031de08b57b3f78ec8",
  "playbook_id": "Alibaba ActionTrail - multiple unauthorized action_attempts detected by a user",
  "suggestion_reason": "Recommended for multiple unauthorized action_attempts detected by a user related alerts",
  "description": "This trigger is responsible for handling 'Alibaba ActionTrail - multiple unauthorized action_attempts detected by a user' alerts",
  "trigger_name": "Alibaba ActionTrail - Multiple Unauthorized Action Attempts Detected By a User Alerts",
  "alerts_filter": {
    "filter": {
      "AND": [
        {
          "SEARCH_FIELD": "alert_name",
          "SEARCH_TYPE": "EQ",
          "SEARCH_VALUE": "Alibaba ActionTrail - multiple unauthorized action attempts detected by a user"
        }
      ]
    }
  }
}