| elastic |
AWS EKS CoreDNS or Kube-DNS Configuration Modified |
production |
2026-10-09 |
| elastic |
AWS Bedrock Knowledge Base or RAG Data Source Tampering |
production |
2026-09-25 |
| elastic |
AWS S3 Static Site JavaScript File Uploaded |
production |
2026-09-18 |
| elastic |
Several Failed Protected Branch Force Pushes by User |
production |
2026-09-18 |
| elastic |
High Number of Protected Branch Force Pushes by User |
production |
2026-09-18 |
| elastic |
GitHub Actions Unusual Bot Push to Repository |
production |
2026-09-18 |
| elastic |
Kubernetes Secret or ConfigMap Access via Azure Arc Proxy |
production |
2026-09-18 |
| elastic |
Kubernetes CoreDNS or Kube-DNS Configuration Modified |
production |
2026-09-18 |
| elastic |
Deprecated - M365 Security Compliance Potential Ransomware Activity |
production |
2026-09-18 |
| elastic |
First Time Seen Memcached Writer |
production |
2026-09-18 |
| elastic |
Hosts File Modified |
production |
2026-09-18 |
| elastic |
AWS S3 Unauthenticated Bucket Access by Rare Source |
production |
2026-09-18 |
| elastic |
AWS CloudTrail Log Updated |
production |
2026-09-18 |
| elastic |
AWS EC2 Encryption Disabled |
production |
2026-09-18 |
| elastic |
Potential AWS S3 Bucket Ransomware Note Uploaded |
production |
2026-09-18 |
| elastic |
GKE CoreDNS or Kube-DNS Configuration Modified |
production |
2026-09-18 |
| elastic |
High Number of Closed Pull Requests by User |
production |
2026-09-18 |
| splunk |
Windows WBAdmin File Recovery From Backup |
production |
2026-05-13 |
| sigma |
Potential Suspicious Change To Sensitive/Critical Files |
test |
2026-03-18 |
| sigma |
Cisco Denial of Service |
test |
2023-01-04 |
| sigma |
Commands to Clear or Remove the Syslog - Builtin |
test |
2022-11-26 |
| sigma |
Azure Device or Configuration Modified or Deleted |
test |
2022-10-09 |
| sigma |
History File Deletion |
test |
2022-09-15 |
| sigma |
Azure DNS Zone Modified or Deleted |
test |
2022-08-23 |