| splunk |
AWS Bedrock Claude Unusually Large Prompts |
production |
2026-07-08 |
| splunk |
Linux EFI Bootloader File Deletion |
production |
2026-07-08 |
| splunk |
Linux Suspicious Docker Build Command Execution |
production |
2026-07-08 |
| splunk |
Linux Root Execution of id |
production |
2026-07-08 |
| splunk |
Linux Shell History Access Via Command Line Utility |
production |
2026-07-08 |
| splunk |
Linux Shell Pseudo Device Reverse Shell |
production |
2026-07-08 |
| splunk |
Linux Possible Bootloader Modification |
production |
2026-07-08 |
| splunk |
Linux Possible Privilege Escalation via PYTHONPATH |
production |
2026-07-08 |
| splunk |
Linux Binary Executed from Shared Memory Directory |
production |
2026-07-08 |
| splunk |
Time Provider Persistence Registry |
production |
2026-07-08 |
| splunk |
Linux Usermod Root UID Set |
production |
2026-07-08 |
| splunk |
Linux UDEV Rule Created |
production |
2026-07-08 |
| splunk |
Linux Suspicious XDG Autostart |
production |
2026-07-08 |
| splunk |
Linux Suspicious Staging of Alternate System Files |
production |
2026-07-08 |
| splunk |
Linux Suspicious Redis Activity |
production |
2026-07-08 |
| splunk |
Linux Suspicious Privileged Container Execution |
production |
2026-07-08 |
| snort |
ET TROJAN IceCube JS Backdoor C2 Collect Info |
rev 1 |
2026-07-07 |
| suricata |
ET MALWARE IceCube JS Backdoor C2 Collect Info |
rev 1 |
2026-07-07 |
| splunk |
Short Lived Scheduled Task |
production |
2026-07-07 |
| sigma |
Local System Accounts Discovery - MacOs |
test |
2026-07-07 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.death .cl domain |
rev 1 |
2026-07-06 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.jericocomputing .com domain |
rev 1 |
2026-07-06 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.ruiz-tagle .com domain |
rev 1 |
2026-07-06 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.maxmir .ru domain |
rev 1 |
2026-07-06 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.ruiz-tagle .com domain |
rev 1 |
2026-07-06 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.kokuakatsfarm .com domain |
rev 1 |
2026-07-06 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.death .cl domain |
rev 1 |
2026-07-06 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.kokuakatsfarm .com domain |
rev 1 |
2026-07-06 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.maxmir .ru domain |
rev 1 |
2026-07-06 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.jericocomputing .com domain |
rev 1 |
2026-07-06 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.ruiz-tagle .com domain |
rev 1 |
2026-07-06 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.maxmir .ru domain |
rev 1 |
2026-07-06 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.jericocomputing .com domain |
rev 1 |
2026-07-06 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.kokuakatsfarm .com domain |
rev 1 |
2026-07-06 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.jericocomputing .com domain |
rev 1 |
2026-07-06 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.maxmir .ru domain |
rev 1 |
2026-07-06 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.death .cl domain |
rev 1 |
2026-07-06 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.kokuakatsfarm .com domain |
rev 1 |
2026-07-06 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.death .cl domain |
rev 1 |
2026-07-06 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.ruiz-tagle .com domain |
rev 1 |
2026-07-06 |