| splunk |
Linux Preload Hijack Library Calls |
production |
2026-05-13 |
| splunk |
Linux Possible Cronjob Modification With Editor |
production |
2026-05-13 |
| splunk |
Linux Possible Append Cronjob Entry on Existing Cronjob File |
production |
2026-05-13 |
| splunk |
Linux Possible Append Command To At Allow Config File |
production |
2026-05-13 |
| splunk |
Linux Possible Access To Sudoers File |
production |
2026-05-13 |
| splunk |
Linux Possible Access To Credential Files |
production |
2026-05-13 |
| splunk |
Linux Possible Access Or Modification Of sshd Config File |
production |
2026-05-13 |
| splunk |
Linux pkexec Privilege Escalation |
production |
2026-05-13 |
| splunk |
Linux PHP Privilege Escalation |
production |
2026-05-13 |
| splunk |
Linux Persistence and Privilege Escalation Risk Behavior |
production |
2026-05-13 |
| splunk |
Linux OpenVPN Privilege Escalation |
production |
2026-05-13 |
| splunk |
Linux Octave Privilege Escalation |
production |
2026-05-13 |
| splunk |
Linux Obfuscated Files or Information Base64 Decode |
production |
2026-05-13 |
| splunk |
Linux NOPASSWD Entry In Sudoers File |
production |
2026-05-13 |
| splunk |
Linux Node Privilege Escalation |
production |
2026-05-13 |
| splunk |
Linux Ngrok Reverse Proxy Usage |
production |
2026-05-13 |
| splunk |
Linux MySQL Privilege Escalation |
production |
2026-05-13 |
| splunk |
Linux Clipboard Data Copy |
production |
2026-05-13 |
| splunk |
Linux Change File Owner To Root |
production |
2026-05-13 |
| splunk |
Linux c99 Privilege Escalation |
production |
2026-05-13 |
| splunk |
Linux c89 Privilege Escalation |
production |
2026-05-13 |
| splunk |
Linux Busybox Privilege Escalation |
production |
2026-05-13 |
| splunk |
Linux AWK Privilege Escalation |
production |
2026-05-13 |
| splunk |
Linux Auditd Whoami User Discovery |
production |
2026-05-13 |
| splunk |
Linux Auditd Virtual Disk File And Directory Discovery |
production |
2026-05-13 |
| splunk |
Linux Auditd Unload Module Via Modprobe |
production |
2026-05-13 |
| splunk |
Linux Auditd Unix Shell Configuration Modification |
production |
2026-05-13 |
| splunk |
Linux Auditd System Network Configuration Discovery |
production |
2026-05-13 |
| splunk |
Linux Docker Root Directory Mount |
production |
2026-05-13 |
| splunk |
Linux Auditd Sysmon Service Stop |
production |
2026-05-13 |
| splunk |
Linux Auditd Sudo Or Su Execution |
production |
2026-05-13 |
| splunk |
Linux Auditd Stop Services |
production |
2026-05-13 |
| splunk |
Linux Auditd Shred Overwrite Command |
production |
2026-05-13 |
| splunk |
Linux Auditd Setuid Using Setcap Utility |
production |
2026-05-13 |
| splunk |
Linux Auditd Setuid Using Chmod Utility |
production |
2026-05-13 |
| splunk |
Linux Auditd Service Started |
production |
2026-05-13 |
| splunk |
Linux Auditd Service Restarted |
production |
2026-05-13 |
| splunk |
Linux Auditd Private Keys and Certificate Enumeration |
production |
2026-05-13 |
| splunk |
Linux Auditd Preload Hijack Via Preload File |
production |
2026-05-13 |
| splunk |
Linux Auditd Preload Hijack Library Calls |
production |
2026-05-13 |