| splunk |
Linux System Reboot Via System Request Key |
production |
2026-10-02 |
| splunk |
Linux Magic SysRq Key Abuse |
production |
2026-10-02 |
| elastic |
ESXi Virtual Machine Powered Off |
production |
2026-09-30 |
| elastic |
Azure Kubernetes Services (AKS) Kubernetes Pods Deleted |
production |
2026-09-18 |
| elastic |
Azure Resource Group Deleted |
production |
2026-09-18 |
| splunk |
ESXi Bulk VM Termination |
production |
2026-09-08 |
| splunk |
Windows Common Abused Cmd Shell Risk Behavior |
production |
2026-05-13 |
| splunk |
Microsoft Intune Manual Device Management |
production |
2026-05-13 |
| splunk |
Windows System LogOff Commandline |
production |
2026-05-13 |
| splunk |
Windows System Reboot CommandLine |
production |
2026-05-13 |
| splunk |
Windows System Shutdown CommandLine |
production |
2026-05-13 |
| sigma |
Potential Abuse of Linux Magic System Request Key |
experimental |
2025-05-23 |
| sigma |
ESXi VM Kill Via ESXCLI |
test |
2023-09-04 |
| sigma |
Silence.EDA Detection |
test |
2023-04-03 |
| sigma |
Cisco Denial of Service |
test |
2023-01-04 |
| sigma |
System Shutdown/Reboot - MacOs |
test |
2022-11-26 |
| sigma |
System Shutdown/Reboot - Linux |
test |
2022-11-26 |
| sigma |
Suspicious Execution of Shutdown to Log Out |
test |
2022-10-01 |
| sigma |
Suspicious Execution of Shutdown |
test |
2022-01-01 |