Atlassian Confluence global setting changed
このページは日本語には対応しておりません。随時翻訳に取り組んでいます。翻訳に関してご質問やご意見ございましたら、お気軽にご連絡ください。
Goal
Detect when a Confluence global setting has been changed.
Strategy
This rule monitors Confluence audit logs for when a global setting has been changed. Global settings include configurations to allow users to share pages publicly and allow anonymous users access to the confluence site.
Triage and response
- Determine if the user
{{@usr.name}}
intended make the global setting change:- Is there a related ticket tracking this change?
- Is
{{@usr.name}}
aware of this activity?
- If the results of the triage indicate that
{{@usr.name}}
was not aware of this activity or it did not originate from a known network, begin your company’s incident response process, and start an investigation.