| splunk |
Excessive number of service control start as disabled |
production |
2026-05-13 |
| splunk |
Excessive File Deletion In WinDefender Folder |
production |
2026-05-13 |
| splunk |
Excessive distinct processes from Windows Temp |
production |
2026-05-13 |
| splunk |
Excessive Attempt To Disable Services |
production |
2026-05-13 |
| splunk |
Eventvwr UAC Bypass |
production |
2026-05-13 |
| splunk |
ETW Registry Disabled |
production |
2026-05-13 |
| splunk |
Esentutl SAM Copy |
production |
2026-05-13 |
| splunk |
Enumerate Users Local Group Using Telegram |
production |
2026-05-13 |
| splunk |
Enable WDigest UseLogonCredential Registry |
production |
2026-05-13 |
| splunk |
Enable RDP In Other Port Number |
production |
2026-05-13 |
| splunk |
Elevated Group Discovery With Wmic |
production |
2026-05-13 |
| splunk |
Elevated Group Discovery with PowerView |
production |
2026-05-13 |
| splunk |
Dump LSASS via procdump |
production |
2026-05-13 |
| splunk |
ESXi System Clock Manipulation |
production |
2026-05-13 |
| splunk |
Dump LSASS via comsvcs DLL |
production |
2026-05-13 |
| splunk |
MacOS Network Share Discovery |
production |
2026-05-13 |
| splunk |
Microsoft Intune Mobile Apps |
experimental |
2026-05-13 |
| splunk |
Domain Account Discovery with Dsquery |
production |
2026-05-13 |
| splunk |
Zscaler Virus Download threat blocked |
production |
2026-05-13 |
| splunk |
Zscaler Scam Destinations Threat Blocked |
production |
2026-05-13 |
| splunk |
Zscaler Privacy Risk Destinations Threat Blocked |
production |
2026-05-13 |
| splunk |
Zscaler Potentially Abused File Download |
production |
2026-05-13 |
| splunk |
Zscaler Phishing Activity Threat Blocked |
production |
2026-05-13 |
| splunk |
Zscaler Malware Activity Threat Blocked |
production |
2026-05-13 |
| splunk |
Zscaler Legal Liability Threat Blocked |
production |
2026-05-13 |
| splunk |
Zscaler Exploit Threat Blocked |
production |
2026-05-13 |
| splunk |
Zscaler Employment Search Web Activity |
production |
2026-05-13 |
| splunk |
Zscaler CryptoMiner Downloaded Threat Blocked |
production |
2026-05-13 |
| splunk |
Zscaler Behavior Analysis Threat Blocked |
production |
2026-05-13 |
| splunk |
Zscaler Adware Activities Threat Blocked |
production |
2026-05-13 |
| splunk |
WS FTP Remote Code Execution |
production |
2026-05-13 |
| splunk |
WordPress Bricks Builder plugin RCE |
production |
2026-05-13 |
| splunk |
Windows SharePoint ToolPane Endpoint Exploitation Attempt |
production |
2026-05-13 |
| splunk |
Windows SharePoint Spinstall0 GET Request |
production |
2026-05-13 |
| splunk |
Windows IIS Server PSWA Console Access |
production |
2026-05-13 |
| splunk |
Windows Exchange Autodiscover SSRF Abuse |
production |
2026-05-13 |
| splunk |
Web Spring Cloud Function FunctionRouter |
production |
2026-05-13 |
| splunk |
Web Spring4Shell HTTP Request Class Module |
production |
2026-05-13 |
| splunk |
Web Remote ShellServlet Access |
production |
2026-05-13 |
| splunk |
Web JSP Request via URL |
production |
2026-05-13 |