Bitbucket User Login Failure — Detection Rule

Detects user authentication failure events. Please note that this rule can be noisy and it is recommended to use with correlation based on "author.name" field.

Read the full analysis on IntelFusions