| splunk |
Microsoft Defender ATP Alerts |
production |
2026-05-13 |
| splunk |
Malicious PowerShell Process With Obfuscation Techniques |
production |
2026-05-13 |
| splunk |
Malicious PowerShell Process - Encoded Command |
production |
2026-05-13 |
| splunk |
Malicious Powershell Executed As A Service |
production |
2026-05-13 |
| splunk |
Malicious InProcServer32 Modification |
production |
2026-05-13 |
| splunk |
Mailsniper Invoke functions |
production |
2026-05-13 |
| splunk |
MacOS plutil |
production |
2026-05-13 |
| splunk |
MacOS LOLbin |
production |
2026-05-13 |
| splunk |
MacOS LoginHook Persistence |
production |
2026-05-13 |
| splunk |
MacOS Log Removal |
production |
2026-05-13 |
| splunk |
MacOS List Firewall Rules |
production |
2026-05-13 |
| splunk |
MacOS Keychains Dumped |
production |
2026-05-13 |
| splunk |
MacOS Kextload Usage |
production |
2026-05-13 |
| splunk |
MacOS Hidden Files and Directories |
production |
2026-05-13 |
| splunk |
MacOS AMOS Stealer - Virtual Machine Check Activity |
production |
2026-05-13 |
| splunk |
Logon Script Event Trigger Execution |
production |
2026-05-13 |
| splunk |
Log4Shell CVE-2021-44228 Exploitation |
production |
2026-05-13 |
| splunk |
Local Account Discovery With Wmic |
production |
2026-05-13 |
| splunk |
Loading Of Dynwrapx Module |
production |
2026-05-13 |
| splunk |
Living Off The Land Detection |
production |
2026-05-13 |
| splunk |
Linux Visudo Utility Execution |
production |
2026-05-13 |
| splunk |
Linux Unix Shell Enable All SysRq Functions |
production |
2026-05-13 |
| splunk |
Linux Telnet Authentication Bypass |
production |
2026-05-13 |
| splunk |
Linux System Reboot Via System Request Key |
production |
2026-05-13 |
| splunk |
Linux System Network Discovery |
production |
2026-05-13 |
| splunk |
Linux Suspicious React or Next.js Child Process |
production |
2026-05-13 |
| splunk |
Linux Medusa Rootkit |
production |
2026-05-13 |
| splunk |
Linux Make Privilege Escalation |
production |
2026-05-13 |
| splunk |
Linux Magic SysRq Key Abuse |
production |
2026-05-13 |
| splunk |
Linux Kworker Process In Writable Process Path |
production |
2026-05-13 |
| splunk |
Linux Kernel Module Enumeration |
production |
2026-05-13 |
| splunk |
Linux Iptables Firewall Modification |
production |
2026-05-13 |
| splunk |
Linux Install Kernel Module Using Modprobe Utility |
production |
2026-05-13 |
| splunk |
Linux Insert Kernel Module Using Insmod Utility |
production |
2026-05-13 |
| splunk |
Linux Ingress Tool Transfer with Curl |
production |
2026-05-13 |
| splunk |
Linux Ingress Tool Transfer Hunting |
production |
2026-05-13 |
| splunk |
Linux Indicator Removal Service File Deletion |
production |
2026-05-13 |
| splunk |
Linux Indicator Removal Clear Cache |
production |
2026-05-13 |
| splunk |
Linux Impair Defenses Process Kill |
production |
2026-05-13 |
| splunk |
Linux High Frequency Of File Deletion In Etc Folder |
production |
2026-05-13 |