| elastic |
Unusual Network Activity from a Windows System Binary |
production |
2026-10-19 |
| splunk |
Windows InstallUtil in Non Standard Path |
production |
2026-10-09 |
| splunk |
Windows InstallUtil Uninstall Option |
production |
2026-10-02 |
| splunk |
Windows DotNet Binary in Non Standard Path |
production |
2026-10-02 |
| elastic |
Suspicious PDF Reader Child Process |
production |
2026-09-18 |
| elastic |
Suspicious MS Office Child Process |
production |
2026-09-18 |
| elastic |
Suspicious MS Outlook Child Process |
production |
2026-09-18 |
| elastic |
Execution of Persistent Suspicious Program |
production |
2026-09-18 |
| elastic |
Suspicious JetBrains TeamCity Child Process |
production |
2026-09-18 |
| elastic |
InstallUtil Process Making Network Connections |
production |
2026-09-18 |
| elastic |
Delayed Execution via Ping |
production |
2026-09-18 |
| elastic |
Execution from Unusual Directory - Command Line |
production |
2026-09-18 |
| splunk |
Windows InstallUtil URL in Command Line |
production |
2026-07-14 |
| splunk |
Windows InstallUtil Remote Network Connection |
production |
2026-07-14 |
| splunk |
Windows InstallUtil Credential Theft |
production |
2026-05-13 |