| elastic |
AWS Bedrock Automated Reasoning Safety Policy Tampering |
production |
2026-09-25 |
| elastic |
Anthropic Sensitive Claude Project Role Assigned to User |
production |
2026-09-25 |
| elastic |
Elastic Defend Alert from GenAI Utility or Descendant |
production |
2026-09-25 |
| elastic |
Execution via OpenClaw Agent |
production |
2026-09-25 |
| elastic |
GenAI CLI Started with Unsafe Permission Bypass |
production |
2026-09-25 |
| elastic |
Azure OpenAI Insecure Output Handling |
production |
2026-09-25 |
| elastic |
Claude Cowork VM Boot Image Tamper |
production |
2026-09-25 |
| elastic |
AWS Bedrock Unauthorized Resource-Based Policy Modification Attempt |
production |
2026-09-25 |
| elastic |
Anthropic MCP Server Created |
production |
2026-09-25 |
| elastic |
AWS Bedrock AgentCore Execution Role Used Outside Its Runtime |
production |
2026-09-25 |
| elastic |
Anthropic Primary Owner Transferred |
production |
2026-09-25 |
| elastic |
Anthropic Admin Role Assigned to User |
production |
2026-09-25 |
| elastic |
Anthropic High File Upload Activity |
production |
2026-09-25 |
| elastic |
Anthropic Artifact Shared Publicly |
production |
2026-09-25 |
| elastic |
Anthropic Compliance API Logging Disabled |
production |
2026-09-25 |
| elastic |
Anthropic Organization Member and Group Enumeration |
production |
2026-09-25 |
| elastic |
Anthropic Excessive Chat Deletion |
production |
2026-09-25 |
| elastic |
Correlated Alerts on Similar User Identities |
production |
2026-09-25 |
| elastic |
Anthropic Admin API Key Created |
production |
2026-09-25 |
| elastic |
LLM-Based Attack Chain Triage by Host |
production |
2026-09-25 |
| elastic |
LLM-Based Compromised User Triage by User |
production |
2026-09-25 |
| elastic |
AWS Bedrock Foundation Model Access Enabled or Entitlement Granted |
production |
2026-09-25 |
| elastic |
Anthropic Excessive Chat Snapshot Creation |
production |
2026-09-25 |
| elastic |
AWS Bedrock Unauthorized Foundation Model Access Attempt |
production |
2026-09-25 |
| elastic |
Potential Azure OpenAI Model Theft |
production |
2026-09-25 |
| elastic |
LLM-Based Wget Activity Triage via Auditd |
production |
2026-09-25 |
| elastic |
AWS Bedrock Guardrail Deleted or Weakened |
production |
2026-09-25 |
| elastic |
AWS Bedrock Untrusted Model Imported or Marketplace Endpoint Registered |
production |
2026-09-25 |
| elastic |
Anthropic Multiple Authentication Failures |
production |
2026-09-25 |
| elastic |
Anthropic Compliance API Key Created |
production |
2026-09-25 |
| elastic |
Anthropic Session Reuse Impossible Travel |
production |
2026-09-25 |
| elastic |
AWS Bedrock Model Invocation Logging Disabled or Modified |
production |
2026-09-25 |
| elastic |
AWS Bedrock High Risk Filesystem or Execution Tool Invocation |
production |
2026-09-25 |
| suricata |
ET DYN_DNS DYNAMIC_DNS HTTP Request to a *.shanetrainfitness .com domain |
rev 1 |
2026-09-25 |
| snort |
ET INFO DYNAMIC_DNS HTTP Request to a *.shanetrainfitness .com domain |
rev 1 |
2026-09-25 |
| elastic |
Node.js Pre or Post-Install Script Execution |
production |
2026-09-25 |
| elastic |
Potential ClickFix Command via Windows Run Dialog |
production |
2026-09-25 |
| suricata |
ET DYN_DNS DYNAMIC_DNS Query to a *.shanetrainfitness .com domain |
rev 1 |
2026-09-25 |
| snort |
ET INFO DYNAMIC_DNS Query to a *.shanetrainfitness .com domain |
rev 1 |
2026-09-25 |
| elastic |
Mark-of-the-Web Removal by an Unusual Process |
production |
2026-09-25 |