Admins can now assign administrator roles to users, groups, or service accounts for a defined period of time. Once the expiration time is reached, the access granted by the role is automatically revoked.This feature helps minimize security risks by reducing standing privileges and ambient access throughout your organization. It also streamlines... Weiterlesen
Intelligence View
⚡ tsecurity.de Intelligence
Assign temporary administrator roles in the Google Admin console
Admins can now assign administrator roles to users, groups, or service accounts for a defined period of time. Once the expiration time is reached, the access granted by the role is automatically revoked.This feature helps minimize security…
Reagiere als Erste:r — dein Feedback zählt!
CTI Threat Relationship Graph2 Knoten / 1 Relationen
IR-PLAYBOOK-VULN-REMEDIATION
MEDIUMSOC Incident Playbook: Vulnerability Remediation & Verification
1-Click Detection Engineering: Sigma & YARA Rules
SOC Readytitle: Detect Exploitation - Assign temporary administrator roles in the Google Admin console
id: a961f438-3375-4022-95b0-f4ac0c4761ed
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
- https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
category: network_connection
product: any
detection:
selection:
CommandLine|contains:
- 'exploit'
condition: selection
falsepositives:
- Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
- attack.initial_accessrule CTI_Threat_Indicator {
meta:
author = "iShareStuff CTI Automated Detection Engine"
date = "2026-09-24"
description = "YARA Signature for "
strings:
$str = "Assign temporary administrator" ascii wide
condition:
any of them
}Infrastructure Blast Radius & Exposure
LOCALIZEDPerimeter & External Ingress
GEFÄHRDET (85%)
Lateral Movement & Pivot
Geringes Risiko
Data Stores & Crown Jewels
Geringes Risiko
Supply Chain & Cascading Reach
Geringes Risiko
SOCIAL SHARE CARD GENERATOR