| elastic |
PostgreSQL COPY PROGRAM Command Execution |
production |
2026-09-18 |
| elastic |
Successful AMQP Multi-Queue Purge Burst |
production |
2026-09-18 |
| elastic |
First-Time Destructive MongoDB Command from a Client IP |
production |
2026-09-18 |
| elastic |
Potential DHCP Starvation via High Client MAC Cardinality |
production |
2026-09-18 |
| elastic |
First Time Seen Memcached Writer |
production |
2026-09-18 |
| elastic |
Potential NFS Destructive Operation Burst |
production |
2026-09-18 |
| elastic |
Potential DNS Rebinding from Public to Private Address |
production |
2026-09-18 |
| elastic |
First Seen SonicWall Remote Access Login by User and Source |
production |
2026-09-18 |
| elastic |
FortiGate Administrator Login from Multiple IP Addresses |
production |
2026-09-18 |
| elastic |
Potential cPanel WHM CRLF Authentication Bypass (CVE-2026-41940) |
production |
2026-09-18 |
| elastic |
Potential Redis Lua Use-After-Free RCE Attempt (CVE-2025-49844 / RediShell) |
production |
2026-09-18 |
| elastic |
React2Shell (CVE-2025-55182) Exploitation Attempt |
production |
2026-09-18 |
| elastic |
React2Shell Network Security Alert |
production |
2026-09-18 |
| elastic |
Splunk Enterprise PostgreSQL Backup-to-Restore Potential RCE Sequence |
production |
2026-09-18 |
| elastic |
Splunk Enterprise PostgreSQL Recovery Endpoint Injection Artifacts |
production |
2026-09-18 |
| elastic |
Thrift RPC Method from an External Client |
production |
2026-09-18 |
| elastic |
Inbound Connection to an Unsecure Elasticsearch Node |
production |
2026-09-18 |
| elastic |
Abnormally Large DNS Response |
production |
2026-09-18 |
| elastic |
FortiGate Administrator Account Creation from Unusual Source |
production |
2026-09-18 |
| elastic |
FortiGate SSO Login Followed by Administrator Account Creation |
production |
2026-09-18 |
| elastic |
FortiGate Super Admin Account Creation |
production |
2026-09-18 |
| elastic |
MySQL User-Defined Function Injection |
production |
2026-09-18 |
| elastic |
Potential Redis CONFIG SET Cron Directory Persistence (RedisRaider) |
production |
2026-09-18 |
| elastic |
Potential Redis CONFIG SET SSH Authorized Key Injection |
production |
2026-09-18 |
| elastic |
Credential Dumping - Detected - Elastic Endgame |
production |
2026-09-18 |
| elastic |
Credential Dumping - Prevented - Elastic Endgame |
production |
2026-09-18 |
| elastic |
CrowdStrike External Alerts |
production |
2026-09-18 |
| elastic |
Elastic Security External Alerts |
production |
2026-09-18 |
| elastic |
Adversary Behavior - Detected - Elastic Endgame |
production |
2026-09-18 |
| elastic |
Malware - Detected - Elastic Endgame |
production |
2026-09-18 |
| elastic |
Malware - Prevented - Elastic Endgame |
production |
2026-09-18 |
| elastic |
Ransomware - Detected - Elastic Endgame |
production |
2026-09-18 |
| elastic |
Ransomware - Prevented - Elastic Endgame |
production |
2026-09-18 |
| elastic |
Exploit - Detected - Elastic Endgame |
production |
2026-09-18 |
| elastic |
Exploit - Prevented - Elastic Endgame |
production |
2026-09-18 |
| elastic |
External Alerts |
production |
2026-09-18 |
| elastic |
Google SecOps External Alerts |
production |
2026-09-18 |
| elastic |
IBM QRadar External Alerts |
production |
2026-09-18 |
| elastic |
Microsoft Defender XDR Alert External Alerts |
production |
2026-09-18 |
| elastic |
Clearing Windows Event Logs |
production |
2026-09-18 |