| splunk |
LOLBAS Rare Network Connection |
production |
2026-08-24 |
| splunk |
Windows SCCM Smsexec Spawned a Suspicious Child Process |
production |
2026-08-24 |
| splunk |
Windows Builtin Account Name Was Changed |
production |
2026-08-24 |
| splunk |
Windows CAB File on Disk |
production |
2026-08-24 |
| elastic |
Unusual Discovery Signal Alert with Unusual Process Command Line |
deprecated |
2026-08-24 |
| splunk |
Windows Filtering Platform Filter Added To Block EDR Process |
production |
2026-08-23 |
| splunk |
Windows EDRSilencer Custom Outbound Filter Added |
production |
2026-08-23 |
| suricata |
ET INFO Observed WindowsPowerShell/5.1 User Agent Usage |
rev 1 |
2026-08-22 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M62 |
rev 1 |
2026-08-21 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M68 |
rev 1 |
2026-08-21 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M60 |
rev 1 |
2026-08-21 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M56 |
rev 1 |
2026-08-21 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M59 |
rev 1 |
2026-08-21 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M69 |
rev 1 |
2026-08-21 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M64 |
rev 1 |
2026-08-21 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M52 |
rev 1 |
2026-08-21 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M53 |
rev 1 |
2026-08-21 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M66 |
rev 1 |
2026-08-21 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M70 |
rev 1 |
2026-08-21 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M54 |
rev 1 |
2026-08-21 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M61 |
rev 1 |
2026-08-21 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M67 |
rev 1 |
2026-08-21 |
| snort |
ET TROJAN go-titan Registration Attempt |
rev 1 |
2026-08-21 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M51 |
rev 1 |
2026-08-21 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M65 |
rev 1 |
2026-08-21 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M63 |
rev 1 |
2026-08-21 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M58 |
rev 1 |
2026-08-21 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M57 |
rev 1 |
2026-08-21 |
| snort |
ET CURRENT_EVENTS Observed ClickFix Javascript Loader URI to *.top domain M55 |
rev 1 |
2026-08-21 |
| suricata |
ET EXPLOIT_KIT Observed ClickFix Javascript Loader URI to *.top domain M68 |
rev 1 |
2026-08-21 |
| suricata |
ET EXPLOIT_KIT Observed ClickFix Javascript Loader URI to *.top domain M67 |
rev 1 |
2026-08-21 |
| suricata |
ET EXPLOIT_KIT Observed ClickFix Javascript Loader URI to *.top domain M53 |
rev 1 |
2026-08-21 |
| suricata |
ET MALWARE go-titan Registration Attempt |
rev 1 |
2026-08-21 |
| suricata |
ET EXPLOIT_KIT Observed ClickFix Javascript Loader URI to *.top domain M55 |
rev 1 |
2026-08-21 |
| suricata |
ET EXPLOIT_KIT Observed ClickFix Javascript Loader URI to *.top domain M66 |
rev 1 |
2026-08-21 |
| suricata |
ET EXPLOIT_KIT Observed ClickFix Javascript Loader URI to *.top domain M70 |
rev 1 |
2026-08-21 |
| suricata |
ET EXPLOIT_KIT Observed ClickFix Javascript Loader URI to *.top domain M64 |
rev 1 |
2026-08-21 |
| suricata |
ET EXPLOIT_KIT Observed ClickFix Javascript Loader URI to *.top domain M61 |
rev 1 |
2026-08-21 |
| suricata |
ET EXPLOIT_KIT Observed ClickFix Javascript Loader URI to *.top domain M58 |
rev 1 |
2026-08-21 |
| suricata |
ET EXPLOIT_KIT Observed ClickFix Javascript Loader URI to *.top domain M51 |
rev 1 |
2026-08-21 |