| elastic |
AWS EKS CoreDNS or Kube-DNS Configuration Modified |
production |
2026-10-09 |
| elastic |
AWS Bedrock Knowledge Base or RAG Data Source Tampering |
production |
2026-09-25 |
| elastic |
Hosts File Modified |
production |
2026-09-18 |
| elastic |
AWS S3 Unauthenticated Bucket Access by Rare Source |
production |
2026-09-18 |
| elastic |
AWS CloudTrail Log Updated |
production |
2026-09-18 |
| elastic |
AWS EC2 Encryption Disabled |
production |
2026-09-18 |
| elastic |
Potential AWS S3 Bucket Ransomware Note Uploaded |
production |
2026-09-18 |
| elastic |
AWS S3 Static Site JavaScript File Uploaded |
production |
2026-09-18 |
| elastic |
GKE CoreDNS or Kube-DNS Configuration Modified |
production |
2026-09-18 |
| elastic |
Agent Spoofing - Multiple Hosts Using Same Agent |
production |
2026-09-18 |
| elastic |
Kubernetes CoreDNS or Kube-DNS Configuration Modified |
production |
2026-09-18 |
| elastic |
Deprecated - M365 Security Compliance Potential Ransomware Activity |
production |
2026-09-18 |
| elastic |
First Time Seen Memcached Writer |
production |
2026-09-18 |
| elastic |
High Number of Closed Pull Requests by User |
production |
2026-09-18 |
| elastic |
Several Failed Protected Branch Force Pushes by User |
production |
2026-09-18 |
| elastic |
High Number of Protected Branch Force Pushes by User |
production |
2026-09-18 |
| elastic |
GitHub Actions Unusual Bot Push to Repository |
production |
2026-09-18 |
| elastic |
Kubernetes Secret or ConfigMap Access via Azure Arc Proxy |
production |
2026-09-18 |
| sigma |
Powershell Add Name Resolution Policy Table Rule |
test |
2022-10-09 |
| sigma |
Google Cloud Re-identifies Sensitive Information |
test |
2022-10-09 |
| sigma |
AWS EC2 Disable EBS Encryption |
stable |
2021-08-20 |