Jeremy Galloway Atlassian Team

Comments

  • Thanks for the question kc. Guard has multiple detections relating to content exfiltration as well as post-exploitation, lateral movement and privileged token use. The audit log provides comprehensive and immutable records about token creation and use, as well as data exports (users, actions, IP/location, etc). In the…
    in Features in Guard that may addressed known tactics for exploit? Comment by Jeremy Galloway July 2024
  • Some additional options to generate activity to create alerts would be to: Add a new user to Beacon Create an IP Allowlist (no need to enable it) Create an Application Tunnel (no need to enable it) Have an admin create a new API key Export the Admin Audit log
    in Activity simulation method? Comment by Jeremy Galloway August 2023
Avatar