| splunk |
GCP Multiple Users Failing To Authenticate From Ip |
production |
2026-05-13 |
| splunk |
GCP Successful Single-Factor Authentication |
production |
2026-05-13 |
| splunk |
GCP Unusual Number of Failed Authentications From Ip |
production |
2026-05-13 |
| splunk |
GitHub Enterprise Delete Branch Ruleset |
production |
2026-05-13 |
| splunk |
GitHub Enterprise Disable 2FA Requirement |
production |
2026-05-13 |
| splunk |
GitHub Enterprise Disable Audit Log Event Stream |
production |
2026-05-13 |
| splunk |
GitHub Enterprise Disable Classic Branch Protection Rule |
production |
2026-05-13 |
| splunk |
GitHub Enterprise Disable Dependabot |
production |
2026-05-13 |
| splunk |
GitHub Enterprise Disable IP Allow List |
production |
2026-05-13 |
| splunk |
GitHub Enterprise Modify Audit Log Event Stream |
production |
2026-05-13 |
| splunk |
GitHub Enterprise Pause Audit Log Event Stream |
production |
2026-05-13 |
| splunk |
GitHub Enterprise Register Self Hosted Runner |
production |
2026-05-13 |
| splunk |
GitHub Enterprise Remove Organization |
production |
2026-05-13 |
| splunk |
Kubernetes Shell Running on Worker Node with CPU Activity |
experimental |
2026-05-13 |
| splunk |
Kubernetes Suspicious Image Pulling |
production |
2026-05-13 |
| splunk |
Kubernetes Unauthorized Access |
production |
2026-05-13 |
| splunk |
Microsoft Intune Bulk Wipe |
production |
2026-05-13 |
| splunk |
Microsoft Intune Device Health Scripts |
production |
2026-05-13 |
| splunk |
Microsoft Intune DeviceManagementConfigurationPolicies |
production |
2026-05-13 |
| splunk |
Microsoft Intune Manual Device Management |
production |
2026-05-13 |
| splunk |
O365 Add App Role Assignment Grant User |
production |
2026-05-13 |
| splunk |
O365 Added Service Principal |
production |
2026-05-13 |
| splunk |
O365 Admin Consent Bypassed by Service Principal |
production |
2026-05-13 |
| splunk |
O365 Advanced Audit Disabled |
production |
2026-05-13 |
| splunk |
O365 Application Available To Other Tenants |
production |
2026-05-13 |
| splunk |
O365 Application Registration Owner Added |
production |
2026-05-13 |
| splunk |
Linux MySQL Privilege Escalation |
production |
2026-05-13 |
| splunk |
O365 ApplicationImpersonation Role Assigned |
production |
2026-05-13 |
| splunk |
O365 Block User Consent For Risky Apps Disabled |
production |
2026-05-13 |
| splunk |
O365 Bypass MFA via Trusted IP |
production |
2026-05-13 |
| splunk |
O365 Compliance Content Search Exported |
production |
2026-05-13 |
| splunk |
O365 Compliance Content Search Started |
production |
2026-05-13 |
| splunk |
Linux Clipboard Data Copy |
production |
2026-05-13 |
| splunk |
O365 Concurrent Sessions From Different Ips |
production |
2026-05-13 |
| splunk |
O365 Cross-Tenant Access Change |
production |
2026-05-13 |
| splunk |
O365 Disable MFA |
production |
2026-05-13 |
| splunk |
O365 DLP Rule Triggered |
production |
2026-05-13 |
| splunk |
O365 Elevated Mailbox Permission Assigned |
production |
2026-05-13 |
| splunk |
O365 Email Access By Security Administrator |
production |
2026-05-13 |
| splunk |
O365 Email Hard Delete Excessive Volume |
production |
2026-05-13 |