| splunk |
Linux c89 Privilege Escalation |
production |
2026-05-13 |
| splunk |
Linux c99 Privilege Escalation |
production |
2026-05-13 |
| splunk |
Linux Change File Owner To Root |
production |
2026-05-13 |
| splunk |
Linux Clipboard Data Copy |
production |
2026-05-13 |
| splunk |
Linux Suspicious React or Next.js Child Process |
production |
2026-05-13 |
| splunk |
Linux System Network Discovery |
production |
2026-05-13 |
| splunk |
Linux System Reboot Via System Request Key |
production |
2026-05-13 |
| splunk |
Linux Telnet Authentication Bypass |
production |
2026-05-13 |
| splunk |
Linux Unix Shell Enable All SysRq Functions |
production |
2026-05-13 |
| splunk |
Linux Visudo Utility Execution |
production |
2026-05-13 |
| splunk |
Living Off The Land Detection |
production |
2026-05-13 |
| splunk |
Loading Of Dynwrapx Module |
production |
2026-05-13 |
| splunk |
Local Account Discovery With Wmic |
production |
2026-05-13 |
| splunk |
Log4Shell CVE-2021-44228 Exploitation |
production |
2026-05-13 |
| splunk |
Logon Script Event Trigger Execution |
production |
2026-05-13 |
| splunk |
MacOS AMOS Stealer - Virtual Machine Check Activity |
production |
2026-05-13 |
| splunk |
MacOS Hidden Files and Directories |
production |
2026-05-13 |
| splunk |
MacOS Kextload Usage |
production |
2026-05-13 |
| splunk |
MacOS Keychains Dumped |
production |
2026-05-13 |
| splunk |
MacOS List Firewall Rules |
production |
2026-05-13 |
| splunk |
MacOS Log Removal |
production |
2026-05-13 |
| splunk |
MacOS LoginHook Persistence |
production |
2026-05-13 |
| splunk |
MacOS LOLbin |
production |
2026-05-13 |
| splunk |
MacOS plutil |
production |
2026-05-13 |
| splunk |
Mailsniper Invoke functions |
production |
2026-05-13 |
| splunk |
Malicious InProcServer32 Modification |
production |
2026-05-13 |
| splunk |
Malicious Powershell Executed As A Service |
production |
2026-05-13 |
| splunk |
Malicious PowerShell Process - Encoded Command |
production |
2026-05-13 |
| splunk |
Malicious PowerShell Process With Obfuscation Techniques |
production |
2026-05-13 |
| splunk |
Microsoft Defender ATP Alerts |
production |
2026-05-13 |
| splunk |
Microsoft Defender Incident Alerts |
production |
2026-05-13 |
| splunk |
Mimikatz PassTheTicket CommandLine Parameters |
production |
2026-05-13 |
| splunk |
Shai-Hulud 2 Exfiltration Artifact Files |
production |
2026-05-13 |
| splunk |
Mmc LOLBAS Execution Process Spawn |
production |
2026-05-13 |
| splunk |
Modification Of Wallpaper |
production |
2026-05-13 |
| splunk |
Modify ACL permission To Files Or Folder |
production |
2026-05-13 |
| splunk |
Monitor Registry Keys for Print Monitors |
production |
2026-05-13 |
| splunk |
MOVEit Certificate Store Access Failure |
production |
2026-05-13 |
| splunk |
MOVEit Empty Key Fingerprint Authentication Attempt |
production |
2026-05-13 |
| splunk |
Single Letter Process On Endpoint |
production |
2026-05-13 |