| elastic |
Malicious File - Prevented - Elastic Defend |
production |
2026-09-18 |
| elastic |
Ransomware - Detected - Elastic Defend |
production |
2026-09-18 |
| elastic |
Ransomware - Prevented - Elastic Defend |
production |
2026-09-18 |
| elastic |
Entra ID Phishing Kit Default OS Build (Entity Analytics) |
production |
2026-09-18 |
| elastic |
Entra ID Device with ROADtools Default OS Build (Entity Analytics) |
production |
2026-09-18 |
| elastic |
Potential Persistence via File Modification |
production |
2026-09-18 |
| elastic |
GCP Pub/Sub Subscription Creation |
production |
2026-09-18 |
| elastic |
GKE Secret Access via Unusual User Agent |
production |
2026-09-18 |
| elastic |
GKE Secrets List from Unusual Source AS Organization |
production |
2026-09-18 |
| elastic |
GCP Firewall Rule Creation |
production |
2026-09-18 |
| elastic |
GCP Firewall Rule Deletion |
production |
2026-09-18 |
| elastic |
GCP Firewall Rule Modification |
production |
2026-09-18 |
| elastic |
GCP Logging Bucket Deletion |
production |
2026-09-18 |
| elastic |
GCP Logging Sink Deletion |
production |
2026-09-18 |
| elastic |
GCP Pub/Sub Subscription Deletion |
production |
2026-09-18 |
| elastic |
GCP Pub/Sub Topic Deletion |
production |
2026-09-18 |
| elastic |
GCP Storage Bucket Configuration Modification |
production |
2026-09-18 |
| elastic |
GCP Storage Bucket Permissions Modification |
production |
2026-09-18 |
| elastic |
GCP Virtual Private Cloud Network Deletion |
production |
2026-09-18 |
| elastic |
GCP Virtual Private Cloud Route Creation |
production |
2026-09-18 |
| elastic |
GCP Virtual Private Cloud Route Deletion |
production |
2026-09-18 |
| elastic |
GKE Anonymous Endpoint Permission Enumeration |
production |
2026-09-18 |
| elastic |
GKE Endpoint Permission Enumeration |
production |
2026-09-18 |
| elastic |
GKE Multi-Resource Discovery |
production |
2026-09-18 |
| elastic |
GKE Suspicious Self-Subject Review via Service Account |
production |
2026-09-18 |
| elastic |
GCP Secret Manager ListSecrets Across Multiple Projects |
production |
2026-09-18 |
| elastic |
GKE Anonymous Pod Create/Update/Patch |
production |
2026-09-18 |
| elastic |
GKE Forbidden Creation Request |
production |
2026-09-18 |
| elastic |
GKE Forbidden Request from Unusual User Agent |
production |
2026-09-18 |
| elastic |
GKE Pod Exec with Curl or Wget to HTTPS |
production |
2026-09-18 |
| elastic |
GKE Pod Exec Potential Reverse Shell |
production |
2026-09-18 |
| elastic |
GKE User Exec into Pod |
production |
2026-09-18 |
| elastic |
GCP Logging Sink Modification |
production |
2026-09-18 |
| elastic |
GKE CoreDNS or Kube-DNS Configuration Modified |
production |
2026-09-18 |
| elastic |
GCP IAM Role Deletion |
production |
2026-09-18 |
| elastic |
GCP Service Account Deletion |
production |
2026-09-18 |
| elastic |
GCP Service Account Disabled |
production |
2026-09-18 |
| elastic |
GCP Storage Bucket Deletion |
production |
2026-09-18 |
| elastic |
GKE Anonymous Request Authorized by Unusual User Agent |
production |
2026-09-18 |
| elastic |
GCP IAM Custom Role Creation |
production |
2026-09-18 |