Rules by Product and UseCase

May 13, 2026 · View on GitHub

Vendor: Auth0

Product: Auth0

Use-Case: Cryptomining

RulesModelsMITRE ATT&CK® TTPsActivity TypesParsers
10311
Event TypeRulesModels
web-activity-allowedT1496 - Resource Hijacking
A-WEB-Shadow-Mining: Host has browsed to a known coinmining/shadowmining domain