| elastic |
File made Immutable by Chattr |
production |
2026-10-09 |
| elastic |
Access Control List Modification via setfacl |
production |
2026-10-09 |
| elastic |
File Execution Permission Modification Detected via Defend for Containers |
production |
2026-10-08 |
| elastic |
File Permission Modification in Writable Directory |
production |
2026-10-08 |
| elastic |
ESXi File Made Executable with chmod |
production |
2026-09-30 |
| elastic |
File Creation in World-Writable Directory by Unusual Process |
production |
2026-09-18 |
| elastic |
Azure Blob Storage Container Access Level Modified |
production |
2026-09-18 |
| elastic |
GCP Storage Bucket Permissions Modification |
production |
2026-09-18 |
| elastic |
Suspicious File Made Executable via Chmod Inside A Container |
production |
2026-09-18 |
| elastic |
System Binary Path File Permission Modification |
production |
2026-09-18 |
| elastic |
Executable Bit Set for Potential Persistence Script |
production |
2026-09-18 |
| elastic |
Potential Unauthorized Access via Wildcard Injection Detected |
production |
2026-09-18 |
| elastic |
Privilege Escalation via CAP_CHOWN/CAP_FOWNER Capabilities |
production |
2026-09-18 |
| elastic |
Adding Hidden File Attribute via Attrib |
production |
2026-09-18 |
| elastic |
System File Ownership Change |
production |
2026-09-18 |
| elastic |
Azure Blob Storage Permissions Modified |
production |
2026-09-18 |
| splunk |
Icacls Deny Command |
production |
2026-09-01 |
| splunk |
Windows Common Abused Cmd Shell Risk Behavior |
production |
2026-05-13 |
| splunk |
Windows SymbolicLink-Testing-Tools Utility Execution |
production |
2026-05-13 |
| splunk |
Modify ACL permission To Files Or Folder |
production |
2026-05-13 |
| splunk |
ICACLS Grant Command |
production |
2026-05-13 |
| splunk |
Permission Modification using Takeown App |
production |
2026-05-13 |
| splunk |
Excessive Usage Of Cacls App |
production |
2026-05-13 |
| sigma |
PowerShell Set-Acl On Windows Folder - PsScript |
test |
2023-07-18 |
| sigma |
PowerShell Script Change Permission Via Set-Acl - PsScript |
test |
2023-07-18 |