| elastic |
AWS EKS Suspicious Assignment of Controller Service Account |
production |
2026-10-21 |
| elastic |
AWS EKS Anonymous Request Authorized by Unusual User Agent |
production |
2026-10-21 |
| splunk |
Windows Guest Account Enabled Via Net.EXE |
production |
2026-10-02 |
| elastic |
ESXi Root Password Accepted from Remote Host |
production |
2026-09-30 |
| elastic |
GKE Anonymous Request Authorized by Unusual User Agent |
production |
2026-09-18 |
| elastic |
GKE Suspicious Assignment of Controller Service Account |
production |
2026-09-18 |
| elastic |
Kubernetes Anonymous Request Authorized by Unusual User Agent |
production |
2026-09-18 |
| elastic |
Kubernetes Suspicious Assignment of Controller Service Account |
production |
2026-09-18 |
| splunk |
Okta New API Token Created |
production |
2026-05-13 |
| splunk |
Okta Phishing Detection with FastPass Origin Check |
experimental |
2026-05-13 |
| splunk |
Okta Suspicious Activity Reported |
production |
2026-05-13 |
| sigma |
Commvault QLogin with PublicSharingUser and GUID Password (CVE-2025-57788) |
experimental |
2025-10-20 |
| sigma |
Root Account Enable Via Dsenableroot |
test |
2023-08-22 |
| sigma |
Guest Account Enabled Via Sysadminctl |
test |
2023-02-18 |
| sigma |
Admin User Remote Logon |
test |
2022-10-09 |