| splunk |
Windows Disable Change Password Through Registry |
production |
2026-05-13 |
| splunk |
Windows Disable Internet Explorer Addons |
production |
2026-05-13 |
| splunk |
Windows Group Policy Object Created |
production |
2026-05-13 |
| splunk |
Windows Disable Lock Workstation Feature Through Registry |
production |
2026-05-13 |
| splunk |
Windows Disable LogOff Button Through Registry |
production |
2026-05-13 |
| splunk |
Windows Disable Memory Crash Dump |
production |
2026-05-13 |
| splunk |
Windows Disable Notification Center |
production |
2026-05-13 |
| splunk |
Windows Disable Windows Event Logging Disable HTTP Logging |
production |
2026-05-13 |
| splunk |
Windows Disable Windows Group Policy Features Through Registry |
production |
2026-05-13 |
| splunk |
Windows DisableAntiSpyware Registry |
production |
2026-05-13 |
| splunk |
Windows DiskCryptor Usage |
production |
2026-05-13 |
| splunk |
Windows Diskshadow Proxy Execution |
production |
2026-05-13 |
| splunk |
Windows DISM Install PowerShell Web Access |
production |
2026-05-13 |
| splunk |
Windows DISM Remove Defender |
production |
2026-05-13 |
| splunk |
Windows DLL Module Loaded in Temp Dir |
production |
2026-05-13 |
| splunk |
Windows DLL Search Order Hijacking with iscsicpl |
production |
2026-05-13 |
| splunk |
Windows DLL Side-Loading In Calc |
production |
2026-05-13 |
| splunk |
Windows DLL Side-Loading Process Child Of Calc |
production |
2026-05-13 |
| splunk |
Windows DNS Gather Network Info |
production |
2026-05-13 |
| splunk |
Windows DNS Query Request To TinyUrl |
production |
2026-05-13 |
| splunk |
Windows DnsAdmins New Member Added |
production |
2026-05-13 |
| splunk |
Windows Domain Account Discovery Via Get-NetComputer |
production |
2026-05-13 |
| splunk |
Windows Downdate Registry Activity |
production |
2026-05-13 |
| splunk |
Windows Driver Inventory |
production |
2026-05-13 |
| splunk |
Windows Driver Load Non-Standard Path |
production |
2026-05-13 |
| splunk |
Windows Drivers Loaded by Signature |
production |
2026-05-13 |
| splunk |
Windows Guest Account Enabled Via Net.EXE |
production |
2026-05-13 |
| splunk |
Windows EFI Bootloader File Modification |
production |
2026-05-13 |
| splunk |
Windows EFI Volume Mount Attempt Via Mountvol |
production |
2026-05-13 |
| splunk |
Windows Enable PowerShell Web Access |
production |
2026-05-13 |
| splunk |
Windows Enable Win32 ScheduledJob via Registry |
production |
2026-05-13 |
| splunk |
Windows Entra User Management Via Azure CLI |
production |
2026-05-13 |
| splunk |
Windows Get-AdComputer Unconstrained Delegation Discovery |
production |
2026-05-13 |
| splunk |
Windows Get Local Admin with FindLocalAdminAccess |
production |
2026-05-13 |
| splunk |
Windows Get-Variable.EXE Execution from WindowsApps Folder |
production |
2026-05-13 |
| splunk |
Windows Global Object Access Audit List Cleared Via Auditpol |
production |
2026-05-13 |
| splunk |
Windows GrimResource - MMC Process Accessing APDS DLL |
production |
2026-05-13 |
| splunk |
Windows Group Discovery Via Net |
production |
2026-05-13 |
| splunk |
Windows Hidden Schedule Task Settings |
production |
2026-05-13 |
| splunk |
Windows Hide Notification Features Through Registry |
production |
2026-05-13 |