Title:Bitbucket User Login Failure Status:test Description:Detects user authentication failure events.
Please note that this rule can be noisy and it is recommended to use with correlation based on "author.name" field.
References: -https://confluence.atlassian.com/bitbucketserver/audit-log-events-776640423.html Author: Muhammad Faisal (@faisalusuf) Date: 2024-02-25 modified:None Tags:
-'attack.privilege-escalation'
-'attack.persistence'
-'attack.initial-access'
-'attack.credential-access'
-'attack.stealth'
-'attack.t1078.004'
-'attack.t1110'
Logsource:
product: bitbucket
service: audit
definition: Requirements: "Advance" log level is required to receive these audit events.
