Tines
Telemetry Evidence
These values show how indexed rules identify Tines telemetry.Panther
Tines.Audit tines
Detection Rules
Panther #
- Tines Actions Disabled Change source medium: Detections when Tines Actions are set to Disabled Change
- Tines Custom CertificateAuthority setting changed source high: Detects when Tines Custom CertificateAuthority settings are changed
- Tines Enqueued/Retrying Job Deletion source low: Currently enqueued or retrying jobs were cleared
- Tines Global Resource Destruction source low: A Tines user has destroyed a global resource.
- Tines SSO Settings source high: Detects when Tines SSO settings are changed
- Tines Story Items Destruction source informational: A user has destroyed a story item
- Tines Story Jobs Clearance source low: A Tines User has cleared story jobs.
- Tines Team Destruction source low: A user has destroyed a team
- Tines Tenant API Keys Added source medium: Detects when Tines Tenant API Keys are added