T1059 on sentinelchangelog.nethttp://sentinelchangelog.net/tags/t1059/Recent content in T1059 on sentinelchangelog.netHugo -- 0.157.0enThu, 28 May 2026 05:16:16 +0000ASIM AlertEvent Support Added for Bitdefender GravityZone Security Platformhttp://sentinelchangelog.net/posts/2026-05-28-pr-13330/Thu, 28 May 2026 05:16:16 +0000http://sentinelchangelog.net/posts/2026-05-28-pr-13330/New parsers enable normalization of Bitdefender GravityZone alert data into Microsoft Sentinel ASIM schema for unified threat detection.AWS Content Quality Overhaul: Standardized Detection Rules and Improved Entity Mappingshttp://sentinelchangelog.net/posts/2026-05-18-pr-14101/Mon, 18 May 2026 07:30:57 +0000http://sentinelchangelog.net/posts/2026-05-18-pr-14101/Comprehensive quality improvements to 61 AWS Analytic Rules and 35 Hunting Queries with standardized naming conventions, normalized MITRE technique mappings, and updated entity field references from legacy AccountCustomEntity to UserIdentityUserName.SAP BTP: 10 New Enterprise Security Detections for Cloud Integration and Identity Servicehttp://sentinelchangelog.net/posts/2026-01-05-pr-13366/Mon, 05 Jan 2026 08:20:43 +0000http://sentinelchangelog.net/posts/2026-01-05-pr-13366/New threat detection coverage for SAP BTP Cloud Integration tampering, identity service compromise, and audit service availability.AWS and VMware ESXi: Three New Analytic Rules for Execution, Exfiltration, and Lateral Movementhttp://sentinelchangelog.net/posts/2025-10-09-pr-12696/Thu, 09 Oct 2025 12:07:12 +0000http://sentinelchangelog.net/posts/2025-10-09-pr-12696/Three new Analytic Rules added across AWS CloudTrail and VMware ESXi — detecting EC2 startup script tampering (T1059), anonymous S3 object exfiltration (T1530), and SSH enablement on ESXi hosts (T1021).