Page MenuHomePhabricator
Create Task
Maniphest T392812

Improve account security monitoring
Open, Needs TriagePublic
Actions

Description

Make sure there is a rate signal for potentially suspicious events, so it's easy to alert on them. See T392811: Improve OpenSearch dashboards related to account security on what kind of events might be worth tracking.

Related Objects

Event Timeline

Tgr created this task.Apr 28 2025, 12:25 PM
Restricted Application added a subscriber: Aklapper. · View Herald TranscriptApr 28 2025, 12:25 PM
kostajh updated the task description. (Show Details)May 2 2025, 8:11 PM
kostajh added a project: Security-Team.
sbassett moved this task from Incoming to Watching on the Security-Team board.May 5 2025, 4:31 PM
sbassett added a project: SecTeam-Processed.
sbassett added subscribers: kostajh, sbassett.

@kostajh - Is there a specific ask of the Security-Team here?

kostajh added a comment.May 5 2025, 4:35 PM
In T392812#10793183, @sbassett wrote:

@kostajh - Is there a specific ask of the Security-Team here?

IMO it would be worth identifying which things we want to alert on, and set up either automatic alerts (as was done in the linked patch above) or manual review processes. I think a chore wheel rotation of reviewing relevant logs (example) would be a nice outcome of this task.

Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL · Credits