[New Rule] Azure WireServer Abuse Related Detections - #6668

Open

terrancedejesus wants to merge 9 commits into

mainfrom

azure-wireserver-detections

Commits on Aug 18, 2026

[New Rule] Azure WireServer credential scrape and guest-agent SAS access

terrancedejesus
and
cursoragent
committed
3e7ab75

Commits on Aug 27, 2026

Update Azure Storage SAS retrieval detection details
terrancedejesus
authored
c1d6fd0
Drop the SAS $system rule and tighten WireServer openssl coverage.

terrancedejesus
and
cursoragent
committed
aa93afe
Merge remote-tracking branch 'origin/main' into azure-wireserver-detections
terrancedejesus
committed
904052b
Merge remote azure-wireserver-detections; keep SAS rule removed.

terrancedejesus
and
cursoragent
committed
4a49615
Fix updated_date to match creation_date
terrancedejesus
authored
2d5a584
Potential fix for pull request finding

terrancedejesus
and
Copilot
authored
dc70b50
Potential fix for pull request finding

terrancedejesus
and
Copilot
authored
0522cc2
Potential fix for pull request finding

terrancedejesus
and
Copilot
authored
0663bd2