| splunk |
Firewall Allowed Program Enable |
production |
2026-06-08 |
| splunk |
Windows Firewall Rule Added |
production |
2026-06-08 |
| splunk |
Windows Modify System Firewall with Notable Process Path |
production |
2026-05-13 |
| splunk |
Microsoft Intune DeviceManagementConfigurationPolicies |
production |
2026-05-13 |
| splunk |
Linux Auditd Disable Or Modify System Firewall |
production |
2026-05-13 |
| splunk |
Linux Iptables Firewall Modification |
production |
2026-05-13 |
| splunk |
Linux Stdout Redirection To Dev Null File |
production |
2026-05-13 |
| splunk |
Windows Delete or Modify System Firewall |
production |
2026-05-13 |
| splunk |
Windows Firewall Rule Deletion |
production |
2026-05-13 |
| splunk |
Windows Firewall Rule Modification |
production |
2026-05-13 |
| splunk |
ESXi Firewall Disabled |
production |
2026-05-13 |
| sigma |
UFW Disable Attempt |
test |
2026-05-04 |
| sigma |
Modify System Firewall |
test |
2025-10-12 |
| sigma |
Flush Iptables Ufw Chain |
test |
2023-01-18 |
| sigma |
Disabling Security Tools - Builtin |
test |
2022-11-26 |
| sigma |
Disabling Security Tools |
test |
2022-10-09 |
| sigma |
Bpfdoor TCP Ports Redirect |
test |
2022-08-10 |
| sigma |
Disable System Firewall |
test |
2022-01-22 |