Welcome to our weekly security detection and report update. Our Incident Detection Engineering (IDE) Team is constantly hard at work. Creating, testing, and writing detections for you! This week, we've made several important updates to improve your security posture and enhance the functionality of our detections. As you might know, monthly, we also release an overview of the entirety of what was changed in the product. However in these updates we'll focus on the net new content that IDE provides on an ongoing basis, musings from our team, and maybe the occasional horoscope if you're lucky.
Introduction and Overview
This week we spent recovering from our time in person with our co-workers across the states (and Canada!). But also by creating some well needed operational detections that need very little explanation.
New Detections
This update introduces:
JumpCloud User Created
I feel weird having to explain this with the title above, so I'll skip this part.
Status: Default Disabled
Log type requirement: JumpCloud
JumpCloud User Deleted
This is getting awkward.
Status: Default Disabled
Log type requirement: JumpCloud
Google Workspace: 100+ Drive Deletions In 15 Minutes
Amanda Berlin is Lead Incident Detection Engineer at Blumira, bringing nearly two decades of experience to her position. At Blumira she leads a team of incident detection engineers who are responsible for creating new detections based on threat intelligence and research for the Blumira platform. An accomplished...
