| splunk |
Cisco Duo Bulk Policy Deletion |
production |
2026-05-13 |
| splunk |
Cisco Duo Bypass Code Generation |
production |
2026-05-13 |
| splunk |
Cisco Duo Policy Allow Devices Without Screen Lock |
production |
2026-05-13 |
| splunk |
Cisco Duo Policy Allow Network Bypass 2FA |
production |
2026-05-13 |
| splunk |
Cisco Duo Policy Allow Old Flash |
production |
2026-05-13 |
| splunk |
Cisco Duo Policy Allow Tampered Devices |
production |
2026-05-13 |
| splunk |
Cisco Duo Policy Bypass 2FA |
production |
2026-05-13 |
| splunk |
Cisco Duo Policy Deny Access |
production |
2026-05-13 |
| splunk |
Cisco Duo Policy Skip 2FA for Other Countries |
production |
2026-05-13 |
| splunk |
Cisco Duo Set User Status to Bypass 2FA |
production |
2026-05-13 |
| splunk |
CrushFTP Server Side Template Injection |
production |
2026-05-13 |
| splunk |
Detect Distributed Password Spray Attempts |
production |
2026-05-13 |
| splunk |
Detect HTML Help Spawn Child Process |
production |
2026-05-13 |
| splunk |
Detect New Login Attempts to Routers |
experimental |
2026-05-13 |
| splunk |
Detect Password Spray Attempts |
production |
2026-05-13 |
| splunk |
Email Attachments With Lots Of Spaces |
experimental |
2026-05-13 |
| splunk |
Email servers sending high volume traffic to hosts |
experimental |
2026-05-13 |
| splunk |
ESXi Account Modified |
production |
2026-05-13 |
| splunk |
ESXi Download Errors |
production |
2026-05-13 |
| splunk |
ESXi Lockdown Mode Disabled |
production |
2026-05-13 |
| splunk |
ESXi Loghost Config Tampering |
production |
2026-05-13 |
| splunk |
ESXi Malicious VIB Forced Install |
production |
2026-05-13 |
| splunk |
ESXi Reverse Shell Patterns |
production |
2026-05-13 |
| splunk |
ESXi Sensitive Files Accessed |
production |
2026-05-13 |
| splunk |
ESXi Shared or Stolen Root Account |
production |
2026-05-13 |
| splunk |
ESXi Shell Access Enabled |
production |
2026-05-13 |
| splunk |
ESXi SSH Brute Force |
production |
2026-05-13 |
| splunk |
ESXi SSH Enabled |
production |
2026-05-13 |
| splunk |
ESXi System Information Discovery |
production |
2026-05-13 |
| splunk |
ESXi User Granted Admin Role |
production |
2026-05-13 |
| splunk |
ESXi VIB Acceptance Level Tampering |
production |
2026-05-13 |
| splunk |
ESXi VM Discovery |
production |
2026-05-13 |
| splunk |
ESXi VM Exported via Remote Tool |
production |
2026-05-13 |
| splunk |
Ivanti VTM New Account Creation |
production |
2026-05-13 |
| splunk |
Monitor Email For Brand Abuse |
experimental |
2026-05-13 |
| splunk |
M365 Copilot Application Usage Pattern Anomalies |
production |
2026-05-13 |
| splunk |
M365 Copilot Failed Authentication Patterns |
production |
2026-05-13 |
| splunk |
Geographic Improbable Location |
experimental |
2026-05-13 |
| splunk |
M365 Copilot Non Compliant Devices Accessing M365 Copilot |
production |
2026-05-13 |
| splunk |
M365 Copilot Session Origin Anomalies |
production |
2026-05-13 |