| splunk |
Okta ThreatInsight Threat Detected |
production |
2026-05-13 |
| splunk |
Okta Unauthorized Access to Application |
production |
2026-05-13 |
| splunk |
Okta User Logins from Multiple Cities |
production |
2026-05-13 |
| splunk |
Ollama Abnormal Network Connectivity |
experimental |
2026-05-13 |
| splunk |
Ollama Abnormal Service Crash Availability Attack |
experimental |
2026-05-13 |
| splunk |
Ollama Excessive API Requests |
experimental |
2026-05-13 |
| splunk |
Ollama Possible API Endpoint Scan Reconnaissance |
experimental |
2026-05-13 |
| splunk |
Ollama Possible Memory Exhaustion Resource Abuse |
experimental |
2026-05-13 |
| splunk |
Ollama Possible Model Exfiltration Data Leakage |
experimental |
2026-05-13 |
| splunk |
Ollama Possible RCE via Model Loading |
experimental |
2026-05-13 |
| splunk |
Ollama Suspicious Prompt Injection Jailbreak |
experimental |
2026-05-13 |
| splunk |
PingID Mismatch Auth Source and Verification Response |
production |
2026-05-13 |
| splunk |
PingID Multiple Failed MFA Requests For User |
production |
2026-05-13 |
| splunk |
PingID New MFA Method After Credential Reset |
production |
2026-05-13 |
| splunk |
PingID New MFA Method Registered For User |
production |
2026-05-13 |
| splunk |
Splunk AppDynamics Secure Application Alerts |
production |
2026-05-13 |
| splunk |
AWS CreateAccessKey |
production |
2026-05-13 |
| splunk |
AWS CreateLoginProfile |
production |
2026-05-13 |
| splunk |
AWS Credential Access Failed Login |
production |
2026-05-13 |
| splunk |
AWS Credential Access GetPasswordData |
production |
2026-05-13 |
| splunk |
AWS Credential Access RDS Password reset |
production |
2026-05-13 |
| splunk |
AWS Defense Evasion Delete Cloudtrail |
production |
2026-05-13 |
| splunk |
Windows RMM Tool Execution |
production |
2026-05-13 |
| splunk |
AWS Defense Evasion Delete CloudWatch Log Group |
production |
2026-05-13 |
| splunk |
AWS Defense Evasion Impair Security Services |
production |
2026-05-13 |
| splunk |
AWS Defense Evasion PutBucketLifecycle |
production |
2026-05-13 |
| splunk |
AWS Defense Evasion Stop Logging Cloudtrail |
production |
2026-05-13 |
| splunk |
AWS Defense Evasion Update Cloudtrail |
production |
2026-05-13 |
| splunk |
AWS Detect Users creating keys with encrypt policy without MFA |
production |
2026-05-13 |
| splunk |
AWS Detect Users with KMS keys performing encryption S3 |
production |
2026-05-13 |
| splunk |
AWS Disable Bucket Versioning |
production |
2026-05-13 |
| splunk |
AWS EC2 Snapshot Shared Externally |
production |
2026-05-13 |
| splunk |
AWS ECR Container Scanning Findings High |
production |
2026-05-13 |
| splunk |
AWS ECR Container Scanning Findings Low Informational Unknown |
production |
2026-05-13 |
| splunk |
AWS ECR Container Scanning Findings Medium |
production |
2026-05-13 |
| splunk |
AWS ECR Container Upload Outside Business Hours |
production |
2026-05-13 |
| splunk |
AWS ECR Container Upload Unknown User |
production |
2026-05-13 |
| splunk |
AWS Excessive Security Scanning |
production |
2026-05-13 |
| splunk |
AWS Exfiltration via Anomalous GetObject API Activity |
production |
2026-05-13 |
| splunk |
AWS Exfiltration via Batch Service |
production |
2026-05-13 |