Platform / product
bitbucket Sigma detection rules
14 community-maintained Sigma detection rules in the library target the bitbucket platform. Browse by severity, inspect the detection logic and MITRE ATT&CK mapping, and open the original Sigma YAML before using a rule in your detection engineering workflow.
Bitbucket Unauthorized Access To A Resource
criticalDetects unauthorized access attempts to a resource.
bitbucket · audit
Bitbucket Unauthorized Full Data Export Triggered
criticalDetects when full data export is attempted an unauthorized user.
bitbucket · audit
Bitbucket Full Data Export Triggered
highDetects when full data export is attempted.
bitbucket · audit
Bitbucket Secret Scanning Exempt Repository Added
highDetects when a repository is exempted from secret scanning feature.
bitbucket · audit
Bitbucket Audit Log Configuration Updated
mediumDetects changes to the bitbucket audit log configuration.
bitbucket · audit
Bitbucket Global Permission Changed
mediumDetects global permissions change activity.
bitbucket · audit
Bitbucket Global Secret Scanning Rule Deleted
mediumDetects Bitbucket global secret scanning rule deletion activity.
bitbucket · audit
Bitbucket Global SSH Settings Changed
mediumDetects Bitbucket global SSH access configuration changes.
bitbucket · audit
Bitbucket User Details Export Attempt Detected
mediumDetects user data export activity.
bitbucket · audit
Bitbucket User Login Failure
mediumDetects user authentication failure events. Please note that this rule can be noisy and it is recommended to use with correlation based on "author.name" field.
bitbucket · audit
Bitbucket User Login Failure Via SSH
mediumDetects SSH user login access failures. Please note that this rule can be noisy and is recommended to use with correlation based on "author.name" field.
bitbucket · audit
Bitbucket User Permissions Export Attempt
mediumDetects user permission data export attempt.
bitbucket · audit
Bitbucket Project Secret Scanning Allowlist Added
lowDetects when a secret scanning allowlist rule is added for projects.
bitbucket · audit
Bitbucket Secret Scanning Rule Deleted
lowDetects when secret scanning rule is deleted for the project or repository.
bitbucket · audit