ATT&CK technique
View on MITRE ATT&CK →
T1686.001
Cloud Firewall
Defense Impairment
13 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| sigma | AWS Bucket Block Public Access Weakened | experimental | 2026-10-21 |
| splunk | ASL AWS Network Access Control List Deleted | production | 2026-05-13 |
| splunk | AWS Network Access Control List Created with All Open Ports | production | 2026-05-13 |
| splunk | AWS Network Access Control List Deleted | production | 2026-05-13 |
| splunk | O365 Bypass MFA via Trusted IP | production | 2026-05-13 |
| splunk | Allow File And Printing Sharing In Firewall | production | 2026-05-13 |
| splunk | Allow Network Discovery In Firewall | production | 2026-05-13 |
| splunk | ASL AWS Network Access Control List Created with All Open Ports | production | 2026-05-13 |
| sigma | New Network Route Added | test | 2024-07-11 |
| sigma | New Network ACL Entry Added | test | 2024-07-11 |
| sigma | Azure Firewall Modified or Deleted | test | 2022-08-23 |
| sigma | Azure Firewall Rule Collection Modified or Deleted | test | 2022-08-23 |
| sigma | Azure Network Firewall Policy Modified or Deleted | test | 2022-08-23 |