T1556 on sentinelchangelog.nethttp://sentinelchangelog.net/tags/t1556/Recent content in T1556 on sentinelchangelog.netHugo -- 0.157.0enFri, 10 Jul 2026 09:21:28 +0000Okta SSO Detection Suite: Richer Alert Context, Configurable Thresholds, and Corrected Entity Mappings Across 9 Rules and 10 Hunting Querieshttp://sentinelchangelog.net/posts/2026-07-10-pr-14498/Fri, 10 Jul 2026 09:21:28 +0000http://sentinelchangelog.net/posts/2026-07-10-pr-14498/Nine Analytic Rules and ten Hunting Queries for Okta SSO have been overhauled with configurable thresholds, allowlist variables, improved JSON parsing, and corrected entity mappings, closing fidelity gaps that degraded Sentinel entity behaviour and alert context.Red Sift Solution: New CCF Data Connector and Email Security Detectionshttp://sentinelchangelog.net/posts/2026-05-14-pr-14036/Thu, 14 May 2026 10:01:32 +0000http://sentinelchangelog.net/posts/2026-05-14-pr-14036/Red Sift adds CCF-based email and authentication monitoring with 5 detection rules for phishing and account compromise scenarios.Entra ID Attack Chain Detection: 5 New Hunting Queries Target Application Layer Persistencehttp://sentinelchangelog.net/posts/2026-05-13-pr-14239/Wed, 13 May 2026 10:29:56 +0000http://sentinelchangelog.net/posts/2026-05-13-pr-14239/Five hunting queries expose OAuth consent abuse, privileged escalation, and Conditional Access evasion used in Midnight Blizzard and Storm-0558 campaigns.SAP BTP: 10 New Enterprise Security Detections for Cloud Integration and Identity Servicehttp://sentinelchangelog.net/posts/2026-01-05-pr-13366/Mon, 05 Jan 2026 08:20:43 +0000http://sentinelchangelog.net/posts/2026-01-05-pr-13366/New threat detection coverage for SAP BTP Cloud Integration tampering, identity service compromise, and audit service availability.UEBA Essentials: Enhanced Multi-Cloud Detection with 6 New AWS, GCP & Okta Hunting Querieshttp://sentinelchangelog.net/posts/2025-11-12-pr-13065/Wed, 12 Nov 2025 11:17:58 +0000http://sentinelchangelog.net/posts/2025-11-12-pr-13065/Major update adds comprehensive multi-cloud anomaly detection capabilities across AWS, GCP, and Okta platforms with 6 new hunting queries.