| splunk |
Linux File Creation In System Generator Directory |
production |
2026-07-08 |
| splunk |
Linux EFI Bootloader File Deletion |
production |
2026-07-08 |
| splunk |
AWS Bedrock Claude Unusually Large Prompts |
production |
2026-07-08 |
| snort |
ET TROJAN IceCube JS Backdoor C2 Collect Info |
rev 1 |
2026-07-07 |
| suricata |
ET MALWARE IceCube JS Backdoor C2 Collect Info |
rev 1 |
2026-07-07 |
| splunk |
Short Lived Scheduled Task |
production |
2026-07-07 |
| sigma |
Local System Accounts Discovery - MacOs |
test |
2026-07-07 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.death .cl domain |
rev 1 |
2026-07-06 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.jericocomputing .com domain |
rev 1 |
2026-07-06 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.ruiz-tagle .com domain |
rev 1 |
2026-07-06 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.maxmir .ru domain |
rev 1 |
2026-07-06 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.death .cl domain |
rev 1 |
2026-07-06 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.kokuakatsfarm .com domain |
rev 1 |
2026-07-06 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.ruiz-tagle .com domain |
rev 1 |
2026-07-06 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.jericocomputing .com domain |
rev 1 |
2026-07-06 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.kokuakatsfarm .com domain |
rev 1 |
2026-07-06 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.maxmir .ru domain |
rev 1 |
2026-07-06 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.kokuakatsfarm .com domain |
rev 1 |
2026-07-06 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.maxmir .ru domain |
rev 1 |
2026-07-06 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.death .cl domain |
rev 1 |
2026-07-06 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.maxmir .ru domain |
rev 1 |
2026-07-06 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.jericocomputing .com domain |
rev 1 |
2026-07-06 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.ruiz-tagle .com domain |
rev 1 |
2026-07-06 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.kokuakatsfarm .com domain |
rev 1 |
2026-07-06 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.ruiz-tagle .com domain |
rev 1 |
2026-07-06 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.death .cl domain |
rev 1 |
2026-07-06 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.jericocomputing .com domain |
rev 1 |
2026-07-06 |
| splunk |
AWS Bedrock Claude Sensitive Data in Prompts |
production |
2026-07-06 |
| splunk |
AWS Bedrock Claude Possible Prompt Injection |
production |
2026-07-06 |
| splunk |
AWS Bedrock Claude Hostile Prompt Sentiment |
production |
2026-07-06 |
| splunk |
AWS Bedrock Claude High Risk Filesystem and Exec Tool Invocation |
production |
2026-07-06 |
| splunk |
Linux Dirty Frag Kernel Privilege Escalation |
production |
2026-07-06 |
| splunk |
Linux Pedit Offset Out Of Bounds |
production |
2026-07-06 |
| splunk |
AWS Bedrock Claude Cross Region Possible Inference Abuse |
production |
2026-07-06 |
| splunk |
AWS Bedrock Claude excessive use of tokens |
production |
2026-07-06 |
| splunk |
Linux Auditd Possible Setuid Execve Privesc |
production |
2026-07-06 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.pohley .org domain |
rev 1 |
2026-07-05 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.atcfirealarms .co .uk domain |
rev 1 |
2026-07-05 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.everich-airfreight .com domain |
rev 1 |
2026-07-05 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.441creative .co .uk domain |
rev 1 |
2026-07-05 |