| elastic |
ESXI Discovery via Grep |
production |
2026-10-09 |
| elastic |
Polkit Version Discovery |
production |
2026-10-09 |
| elastic |
Pluggable Authentication Module (PAM) Version Discovery |
production |
2026-10-09 |
| elastic |
ESXI Discovery via Find |
production |
2026-09-18 |
| elastic |
Tool Enumeration Detected via Defend for Containers |
production |
2026-09-18 |
| elastic |
Unusual Kernel Module Enumeration |
production |
2026-09-18 |
| elastic |
Suspicious which Enumeration |
production |
2026-09-18 |
| elastic |
Yum/DNF Plugin Status Discovery |
production |
2026-09-18 |
| elastic |
Enumeration Command Spawned via WMIPrvSE |
production |
2026-09-18 |
| elastic |
Security Software Discovery via Grep |
production |
2026-09-18 |
| elastic |
AWS SSM Inventory Reconnaissance by Rare User |
production |
2026-09-18 |
| splunk |
Windows Software Discovery Via PowerShell |
production |
2026-05-13 |
| sigma |
HackTool - WinPwn Execution |
test |
2023-12-04 |
| sigma |
HackTool - WinPwn Execution - ScriptBlock |
test |
2023-12-04 |
| sigma |
Detected Windows Software Discovery - PowerShell |
test |
2022-12-02 |
| sigma |
Detected Windows Software Discovery |
test |
2022-10-09 |