Tags | Detection.FYI

Data Source: AWS

Jun 17, 2025 ·
Share on:

Read More
Data Source: AWS EC2

Jun 17, 2025 ·
Share on:

Read More
Domain: Cloud

Jun 17, 2025 ·
Share on:

Read More
Resources: Investigation Guide

Jun 17, 2025 ·
Share on:

Read More
Tactic: Discovery

Jun 17, 2025 ·
Share on:

Read More
Use Case: Threat Detection

Jun 17, 2025 ·
Share on:

Read More
Data Source: PowerShell Logs

Jun 17, 2025 ·
Share on:

Read More
Domain: Endpoint

Jun 17, 2025 ·
Share on:

Read More
OS: Windows

Jun 17, 2025 ·
Share on:

Read More
Tactic: Defense Evasion

Jun 17, 2025 ·
Share on:

Read More
Data Source: Elastic Defend

Jun 17, 2025 ·
Share on:

Read More
Domain: Container

Jun 17, 2025 ·
Share on:

Read More
OS: Linux

Jun 17, 2025 ·
Share on:

Read More
Tactic: Initial Access

Jun 17, 2025 ·
Share on:

Read More
Tactic: Lateral Movement

Jun 17, 2025 ·
Share on:

Read More
Tactic: Execution

Jun 17, 2025 ·
Share on:

Read More
Data Source: Kubernetes

Jun 17, 2025 ·
Share on:

Read More
Data Source: Active Directory

Jun 16, 2025 ·
Share on:

Read More
Data Source: Windows Security Event Logs

Jun 16, 2025 ·
Share on:

Read More
Tactic: Credential Access

Jun 16, 2025 ·
Share on:

Read More
Use Case: Active Directory Monitoring

Jun 16, 2025 ·
Share on:

Read More
attack.persistence

Jun 16, 2025 ·
Share on:

Read More
attack.t1547.001

Jun 16, 2025 ·
Share on:

Read More
Data Source: Elastic Endgame

Jun 16, 2025 ·
Share on:

Read More
Data Source: Microsoft Defender for Endpoint

Jun 16, 2025 ·
Share on:

Read More
Data Source: SentinelOne

Jun 16, 2025 ·
Share on:

Read More
Data Source: Sysmon

Jun 16, 2025 ·
Share on:

Read More
Tactic: Command and Control

Jun 16, 2025 ·
Share on:

Read More
Tactic: Persistence

Jun 16, 2025 ·
Share on:

Read More
attack.defense-evasion

Jun 13, 2025 ·
Share on:

Read More
attack.execution

Jun 13, 2025 ·
Share on:

Read More
attack.lateral-movement

Jun 13, 2025 ·
Share on:

Read More
attack.t1105

Jun 13, 2025 ·
Share on:

Read More
attack.t1218

Jun 13, 2025 ·
Share on:

Read More
cve.2025-33053

Jun 13, 2025 ·
Share on:

Read More
detection.emerging-threats

Jun 13, 2025 ·
Share on:

Read More
attack.command-and-control

Jun 13, 2025 ·
Share on:

Read More
attack.t1203

Jun 13, 2025 ·
Share on:

Read More
attack.t1219.002

Jun 13, 2025 ·
Share on:

Read More
Attack surface reduction

Jun 12, 2025 ·
Share on:

Read More
attack.discovery

Jun 12, 2025 ·
Share on:

Read More
attack.privilege-escalation

Jun 12, 2025 ·
Share on:

Read More
attack.t1059.001

Jun 12, 2025 ·
Share on:

Read More
attack.t1068

Jun 12, 2025 ·
Share on:

Read More
attack.t1069

Jun 12, 2025 ·
Share on:

Read More
attack.t1069.001

Jun 12, 2025 ·
Share on:

Read More
attack.t1069.002

Jun 12, 2025 ·
Share on:

Read More
attack.t1087

Jun 12, 2025 ·
Share on:

Read More
attack.t1087.001

Jun 12, 2025 ·
Share on:

Read More
attack.t1087.002

Jun 12, 2025 ·
Share on:

Read More
attack.t1482

Jun 12, 2025 ·
Share on:

Read More
attack.t1082

Jun 12, 2025 ·
Share on:

Read More
attack.t1071.004

Jun 12, 2025 ·
Share on:

Read More
attack.exfiltration

Jun 12, 2025 ·
Share on:

Read More
attack.g0010

Jun 12, 2025 ·
Share on:

Read More
attack.initial-access

Jun 12, 2025 ·
Share on:

Read More
attack.t1055

Jun 12, 2025 ·
Share on:

Read More
attack.t1071.001

Jun 12, 2025 ·
Share on:

Read More
attack.t1112

Jun 12, 2025 ·
Share on:

Read More
attack.t1204.002

Jun 12, 2025 ·
Share on:

Read More
attack.t1566.001

Jun 12, 2025 ·
Share on:

Read More
attack.t1567.002

Jun 12, 2025 ·
Share on:

Read More
cve.2020-1048

Jun 12, 2025 ·
Share on:

Read More
attack.t1059.007

Jun 11, 2025 ·
Share on:

Read More
attack.t1140

Jun 11, 2025 ·
Share on:

Read More
attack.t1218.005

Jun 11, 2025 ·
Share on:

Read More
cve.2020-1599

Jun 11, 2025 ·
Share on:

Read More
attack.t1190

Jun 11, 2025 ·
Share on:

Read More
attack.t1505.003

Jun 11, 2025 ·
Share on:

Read More
cve.2025-31324

Jun 11, 2025 ·
Share on:

Read More
attack.t1218.009

Jun 11, 2025 ·
Share on:

Read More
attack.t1562.001

Jun 11, 2025 ·
Share on:

Read More
attack.impact

Jun 11, 2025 ·
Share on:

Read More
attack.t1485

Jun 11, 2025 ·
Share on:

Read More
attack.credential-access

Jun 11, 2025 ·
Share on:

Read More
Data Source: Azure

Jun 10, 2025 ·
Share on:

Read More
Data Source: Entra ID

Jun 10, 2025 ·
Share on:

Read More
Data Source: Entra ID Sign-in

Jun 10, 2025 ·
Share on:

Read More
Domain: SaaS

Jun 10, 2025 ·
Share on:

Read More
Use Case: Identity and Access Audit

Jun 10, 2025 ·
Share on:

Read More
Data Source: Entra ID Sign-in Logs

Jun 10, 2025 ·
Share on:

Read More
Domain: Identity

Jun 10, 2025 ·
Share on:

Read More
Deliverability testing

Jun 9, 2025 ·
Share on:

Read More
Data Source: Crowdstrike

Jun 9, 2025 ·
Share on:

Read More
Tactic: Privilege Escalation

Jun 9, 2025 ·
Share on:

Read More
Data Source: Amazon Web Services

Jun 6, 2025 ·
Share on:

Read More
Use Case: Log Auditing

Jun 6, 2025 ·
Share on:

Read More
Use Case: Network Security Monitoring

Jun 6, 2025 ·
Share on:

Read More
attack.t1057

Jun 5, 2025 ·
Share on:

Read More
attack.t1027

Jun 5, 2025 ·
Share on:

Read More
attack.t1036.007

Jun 5, 2025 ·
Share on:

Read More
attack.t1543.003

Jun 5, 2025 ·
Share on:

Read More
attack.collection

Jun 5, 2025 ·
Share on:

Read More
attack.t1055.009

Jun 5, 2025 ·
Share on:

Read More
attack.t1070.002

Jun 5, 2025 ·
Share on:

Read More
attack.t1123

Jun 5, 2025 ·
Share on:

Read More
attack.t1033

Jun 5, 2025 ·
Share on:

Read More
attack.reconnaissance

Jun 5, 2025 ·
Share on:

Read More
attack.t1592.004

Jun 5, 2025 ·
Share on:

Read More
attack.t1021.003

Jun 4, 2025 ·
Share on:

Read More
attack.t1127

Jun 4, 2025 ·
Share on:

Read More
attack.t1574.001

Jun 4, 2025 ·
Share on:

Read More
Tactic: Exfiltration

Jun 4, 2025 ·
Share on:

Read More
Tactic: Impact

Jun 4, 2025 ·
Share on:

Read More
Use Case: Asset Visibility

Jun 4, 2025 ·
Share on:

Read More
Data Source: Azure Activity Logs

Jun 4, 2025 ·
Share on:

Read More
Data Source: Graph API

Jun 4, 2025 ·
Share on:

Read More
Data Source: Graph API Activity Logs

Jun 4, 2025 ·
Share on:

Read More
Data Source: Microsoft 365

Jun 4, 2025 ·
Share on:

Read More
Data Source: Microsoft 365 Audit Logs

Jun 4, 2025 ·
Share on:

Read More
Data Source: Microsoft Entra ID

Jun 4, 2025 ·
Share on:

Read More
Data Source: Microsoft Entra ID Audit Logs

Jun 4, 2025 ·
Share on:

Read More
Data Source: Microsoft Entra ID Sign-in Logs

Jun 4, 2025 ·
Share on:

Read More
Use Case: Risk Detection

Jun 4, 2025 ·
Share on:

Read More
attack.resource-development

Jun 4, 2025 ·
Share on:

Read More
attack.t1003

Jun 4, 2025 ·
Share on:

Read More
attack.t1020

Jun 4, 2025 ·
Share on:

Read More
attack.t1021

Jun 4, 2025 ·
Share on:

Read More
attack.t1021.002

Jun 4, 2025 ·
Share on:

Read More
attack.t1021.004

Jun 4, 2025 ·
Share on:

Read More
attack.t1021.006

Jun 4, 2025 ·
Share on:

Read More
attack.t1036.003

Jun 4, 2025 ·
Share on:

Read More
attack.t1047

Jun 4, 2025 ·
Share on:

Read More
attack.t1048

Jun 4, 2025 ·
Share on:

Read More
attack.t1053

Jun 4, 2025 ·
Share on:

Read More
attack.t1053.002

Jun 4, 2025 ·
Share on:

Read More
attack.t1055.003

Jun 4, 2025 ·
Share on:

Read More
attack.t1059

Jun 4, 2025 ·
Share on:

Read More
attack.t1069.003

Jun 4, 2025 ·
Share on:

Read More
attack.t1078.004

Jun 4, 2025 ·
Share on:

Read More
attack.t1087.004

Jun 4, 2025 ·
Share on:

Read More
attack.t1110

Jun 4, 2025 ·
Share on:

Read More
attack.t1195

Jun 4, 2025 ·
Share on:

Read More
attack.t1195.001

Jun 4, 2025 ·
Share on:

Read More
attack.t1210

Jun 4, 2025 ·
Share on:

Read More
attack.t1211

Jun 4, 2025 ·
Share on:

Read More
attack.t1218.011

Jun 4, 2025 ·
Share on:

Read More
attack.t1486

Jun 4, 2025 ·
Share on:

Read More
attack.t1498

Jun 4, 2025 ·
Share on:

Read More
attack.t1531

Jun 4, 2025 ·
Share on:

Read More
attack.t1537

Jun 4, 2025 ·
Share on:

Read More
attack.t1548

Jun 4, 2025 ·
Share on:

Read More
attack.t1548.001

Jun 4, 2025 ·
Share on:

Read More
attack.t1552.004

Jun 4, 2025 ·
Share on:

Read More
attack.t1552.007

Jun 4, 2025 ·
Share on:

Read More
attack.t1555

Jun 4, 2025 ·
Share on:

Read More
attack.t1557.001

Jun 4, 2025 ·
Share on:

Read More
attack.t1566

Jun 4, 2025 ·
Share on:

Read More
attack.t1566.002

Jun 4, 2025 ·
Share on:

Read More
attack.t1569

Jun 4, 2025 ·
Share on:

Read More
attack.t1569.002

Jun 4, 2025 ·
Share on:

Read More
attack.t1584

Jun 4, 2025 ·
Share on:

Read More
attack.t1588.002

Jun 4, 2025 ·
Share on:

Read More
attack.t1590

Jun 4, 2025 ·
Share on:

Read More
attack.t1590.001

Jun 4, 2025 ·
Share on:

Read More
attack.t1608

Jun 4, 2025 ·
Share on:

Read More
attack.t1609

Jun 4, 2025 ·
Share on:

Read More
attack.t1611

Jun 4, 2025 ·
Share on:

Read More
attack.t1027.010

Jun 4, 2025 ·
Share on:

Read More
attack.t1218.007

Jun 4, 2025 ·
Share on:

Read More
attack.s0404

Jun 4, 2025 ·
Share on:

Read More
attack.t1003.003

Jun 4, 2025 ·
Share on:

Read More
attack.t1021.001

Jun 4, 2025 ·
Share on:

Read More
attack.t1049

Jun 4, 2025 ·
Share on:

Read More
attack.t1059.003

Jun 4, 2025 ·
Share on:

Read More
attack.t1059.009

Jun 4, 2025 ·
Share on:

Read More
attack.t1078

Jun 4, 2025 ·
Share on:

Read More
attack.t1090

Jun 4, 2025 ·
Share on:

Read More
attack.t1106

Jun 4, 2025 ·
Share on:

Read More
attack.t1135

Jun 4, 2025 ·
Share on:

Read More
attack.t1187

Jun 4, 2025 ·
Share on:

Read More
attack.t1218.010

Jun 4, 2025 ·
Share on:

Read More
attack.t1489

Jun 4, 2025 ·
Share on:

Read More
attack.t1496

Jun 4, 2025 ·
Share on:

Read More
attack.t1546

Jun 4, 2025 ·
Share on:

Read More
attack.t1562.002

Jun 4, 2025 ·
Share on:

Read More
attack.t1586.003

Jun 4, 2025 ·
Share on:

Read More
cve.2021-20090

Jun 4, 2025 ·
Share on:

Read More
cve.2021-20091

Jun 4, 2025 ·
Share on:

Read More
cve.2021-31979

Jun 4, 2025 ·
Share on:

Read More
cve.2021-33771

Jun 4, 2025 ·
Share on:

Read More
cve.2021-42278

Jun 4, 2025 ·
Share on:

Read More
cve.2021-42287

Jun 4, 2025 ·
Share on:

Read More
cve.2023-23397

Jun 4, 2025 ·
Share on:

Read More
cve.2025-30406

Jun 4, 2025 ·
Share on:

Read More
attack.t1490

Jun 4, 2025 ·
Share on:

Read More
attack.t1505

Jun 4, 2025 ·
Share on:

Read More
attack.t1565.002

Jun 4, 2025 ·
Share on:

Read More
Data Source: AWS Cloudtrail

Jun 2, 2025 ·
Share on:

Read More
Data Source: AWS IAM

Jun 2, 2025 ·
Share on:

Read More
Domain: Email

Jun 2, 2025 ·
Share on:

Read More
attack.t1036

Jun 2, 2025 ·
Share on:

Read More
attack.t1078.002

Jun 2, 2025 ·
Share on:

Read More
attack.t1102

Jun 2, 2025 ·
Share on:

Read More
attack.t1102.001

Jun 2, 2025 ·
Share on:

Read More
attack.t1528

Jun 2, 2025 ·
Share on:

Read More
attack.t1552

Jun 2, 2025 ·
Share on:

Read More
attack.t1552.006

Jun 2, 2025 ·
Share on:

Read More
attack.t1553

Jun 2, 2025 ·
Share on:

Read More
attack.t1555.004

Jun 2, 2025 ·
Share on:

Read More
attack.t1556

Jun 2, 2025 ·
Share on:

Read More
cve.2024-37085

Jun 2, 2025 ·
Share on:

Read More
attack.t1059.004

May 31, 2025 ·
Share on:

Read More
attack.t1499

May 31, 2025 ·
Share on:

Read More
attack.t1529

May 31, 2025 ·
Share on:

Read More
Suspicious Attachment

May 30, 2025 ·
Share on:

Read More
Suspicious content

May 30, 2025 ·
Share on:

Read More
attack.t1204

May 27, 2025 ·
Share on:

Read More
attack.t1003.001

May 27, 2025 ·
Share on:

Read More
attack.t1129

May 26, 2025 ·
Share on:

Read More
attack.t1217

May 26, 2025 ·
Share on:

Read More
attack.t1552.002

May 26, 2025 ·
Share on:

Read More
attack.t1555.003

May 26, 2025 ·
Share on:

Read More
attack.t1003.002

May 21, 2025 ·
Share on:

Read More
attack.t1005

May 21, 2025 ·
Share on:

Read More
attack.t1007

May 21, 2025 ·
Share on:

Read More
attack.t1059.012

May 21, 2025 ·
Share on:

Read More
attack.t1098

May 21, 2025 ·
Share on:

Read More
attack.t1136

May 21, 2025 ·
Share on:

Read More
attack.t1562.003

May 21, 2025 ·
Share on:

Read More
attack.t1546.015

May 20, 2025 ·
Share on:

Read More
attack.t1036.005

May 20, 2025 ·
Share on:

Read More
attack.t1070

May 20, 2025 ·
Share on:

Read More
attack.t1071

May 20, 2025 ·
Share on:

Read More
attack.t1127.001

May 20, 2025 ·
Share on:

Read More
attack.t1202

May 20, 2025 ·
Share on:

Read More
attack.t1553.004

May 20, 2025 ·
Share on:

Read More
attack.t1564

May 20, 2025 ·
Share on:

Read More
attack.t1564.002

May 20, 2025 ·
Share on:

Read More
attack.t1114

May 20, 2025 ·
Share on:

Read More
attack.t1185

May 20, 2025 ·
Share on:

Read More
attack.t1550.002

May 20, 2025 ·
Share on:

Read More
attack.t1560.001

May 20, 2025 ·
Share on:

Read More
attack.t1552.001

May 20, 2025 ·
Share on:

Read More
attack.t1564.004

May 20, 2025 ·
Share on:

Read More
attack.t1567

May 20, 2025 ·
Share on:

Read More
attack.t1078.001

May 20, 2025 ·
Share on:

Read More
attack.t1078.003

May 20, 2025 ·
Share on:

Read More
attack.t1098.005

May 20, 2025 ·
Share on:

Read More
attack.t1207

May 20, 2025 ·
Share on:

Read More
attack.t1505.001

May 20, 2025 ·
Share on:

Read More
attack.t1505.004

May 20, 2025 ·
Share on:

Read More
attack.t1558.003

May 20, 2025 ·
Share on:

Read More
attack.t1562

May 20, 2025 ·
Share on:

Read More
car.2016-04-005

May 20, 2025 ·
Share on:

Read More
attack.t1018

May 20, 2025 ·
Share on:

Read More
cve.2025-4427

May 20, 2025 ·
Share on:

Read More
cve.2025-4428

May 20, 2025 ·
Share on:

Read More
attack.t1053.005

May 20, 2025 ·
Share on:

Read More
attack.t1113

May 20, 2025 ·
Share on:

Read More
attack.t1134.001

May 20, 2025 ·
Share on:

Read More
attack.t1134.003

May 20, 2025 ·
Share on:

Read More
attack.t1553.003

May 20, 2025 ·
Share on:

Read More
attack.t1572

May 20, 2025 ·
Share on:

Read More
cve.2023-1389

May 20, 2025 ·
Share on:

Read More
cve.2024-3094

May 20, 2025 ·
Share on:

Read More
Data Source: Microsoft Graph

May 19, 2025 ·
Share on:

Read More
Data Source: Microsoft Graph Activity Logs

May 19, 2025 ·
Share on:

Read More
Rule Type: Higher-Order Rule

May 19, 2025 ·
Share on:

Read More
attack.g0027

May 15, 2025 ·
Share on:

Read More
attack.g0032

May 15, 2025 ·
Share on:

Read More
attack.g0044

May 15, 2025 ·
Share on:

Read More
attack.s0013

May 15, 2025 ·
Share on:

Read More
attack.t1548.002

May 15, 2025 ·
Share on:

Read More
Tactic: Collection

May 10, 2025 ·
Share on:

Read More
Data Source: Microsoft Exchange

May 8, 2025 ·
Share on:

Read More
Use Case: Configuration Audit

May 8, 2025 ·
Share on:

Read More
Data Source: Network

May 6, 2025 ·
Share on:

Read More
Data Source: Rapid7 Threat Command

May 6, 2025 ·
Share on:

Read More
Data Source: Windows

May 6, 2025 ·
Share on:

Read More
Domain: Network

May 6, 2025 ·
Share on:

Read More
Rule Type: Machine Learning

May 6, 2025 ·
Share on:

Read More
Rule Type: ML

May 6, 2025 ·
Share on:

Read More
Rule Type: Threat Match

May 6, 2025 ·
Share on:

Read More
Threat: Cobalt Strike

May 6, 2025 ·
Share on:

Read More
Use Case: Continuous Monitoring

May 6, 2025 ·
Share on:

Read More
Use Case: Domain Generation Algorithm Detection

May 6, 2025 ·
Share on:

Read More
Use Case: Vulnerability

May 6, 2025 ·
Share on:

Read More
Data Source: Auditd Manager

May 5, 2025 ·
Share on:

Read More
Data Source: PAN-OS

May 5, 2025 ·
Share on:

Read More
Data Source: Microsoft Entra ID Protection Logs

May 2, 2025 ·
Share on:

Read More
Data Source: AWS S3

Apr 30, 2025 ·
Share on:

Read More
Use Case: Cloud Threat Detection

Apr 30, 2025 ·
Share on:

Read More
Use Case: Web Application Compromise

Apr 30, 2025 ·
Share on:

Read More
attack.t1012

Apr 25, 2025 ·
Share on:

Read More
attack.t1046

Apr 25, 2025 ·
Share on:

Read More
attack.t1213

Apr 25, 2025 ·
Share on:

Read More
attack.t1574.005

Apr 25, 2025 ·
Share on:

Read More
attack.t1591.004

Apr 25, 2025 ·
Share on:

Read More
attack.t1615

Apr 25, 2025 ·
Share on:

Read More
Data Source: AWS STS

Apr 24, 2025 ·
Share on:

Read More
Data Source: Windows System Event Logs

Apr 24, 2025 ·
Share on:

Read More
OS: macOS

Apr 22, 2025 ·
Share on:

Read More
DarkGate

Apr 17, 2025 ·
Share on:

Read More
PikaBot

Apr 17, 2025 ·
Share on:

Read More
cve.2025-31161

Apr 17, 2025 ·
Share on:

Read More
cve.2020-1472

Apr 17, 2025 ·
Share on:

Read More
attack.t1070.001

Apr 16, 2025 ·
Share on:

Read More
car.2016-04-002

Apr 16, 2025 ·
Share on:

Read More
attack.t1040

Apr 16, 2025 ·
Share on:

Read More
attack.t1041

Apr 16, 2025 ·
Share on:

Read More
attack.t1055.011

Apr 16, 2025 ·
Share on:

Read More
attack.t1090.002

Apr 16, 2025 ·
Share on:

Read More
attack.t1497.001

Apr 16, 2025 ·
Share on:

Read More
attack.t1543.001

Apr 16, 2025 ·
Share on:

Read More
attack.t1543.004

Apr 16, 2025 ·
Share on:

Read More
attack.t1562.004

Apr 16, 2025 ·
Share on:

Read More
attack.t1567.001

Apr 16, 2025 ·
Share on:

Read More
attack.t1569.001

Apr 16, 2025 ·
Share on:

Read More
attack.t1571

Apr 16, 2025 ·
Share on:

Read More
Tactic: Reconnaissance

Apr 10, 2025 ·
Share on:

Read More
Data Source: Azure Event Hubs

Apr 7, 2025 ·
Share on:

Read More
Data Source: Azure OpenAI

Apr 7, 2025 ·
Share on:

Read More
Domain: LLM

Apr 7, 2025 ·
Share on:

Read More
Mitre Atlas: T0029

Apr 7, 2025 ·
Share on:

Read More
Mitre Atlas: T0044

Apr 7, 2025 ·
Share on:

Read More
Use Case: Denial of Service

Apr 7, 2025 ·
Share on:

Read More
Use Case: Insecure Output Handling

Apr 7, 2025 ·
Share on:

Read More
Use Case: Model Theft

Apr 7, 2025 ·
Share on:

Read More
car.2016-03-001

Apr 7, 2025 ·
Share on:

Read More
attack.t1558

Apr 7, 2025 ·
Share on:

Read More
attack.t1589.002

Apr 7, 2025 ·
Share on:

Read More
Data Source: APM

Mar 27, 2025 ·
Share on:

Read More
Tactic:Execution

Mar 26, 2025 ·
Share on:

Read More
Use Case: Living off the Land Attack Detection

Mar 26, 2025 ·
Share on:

Read More
Data Source: AWS DynamoDB

Mar 21, 2025 ·
Share on:

Read More
Data Source: AWS Bedrock

Mar 20, 2025 ·
Share on:

Read More
Data Source: AWS KMS

Mar 20, 2025 ·
Share on:

Read More
Data Source: AWS Sign-In

Mar 20, 2025 ·
Share on:

Read More
Data Source: Github

Mar 20, 2025 ·
Share on:

Read More
Data Source: OneDrive

Mar 20, 2025 ·
Share on:

Read More
Data Source: SharePoint

Mar 20, 2025 ·
Share on:

Read More
Mitre Atlas: LLM04

Mar 20, 2025 ·
Share on:

Read More
Mitre Atlas: T0015

Mar 20, 2025 ·
Share on:

Read More
Mitre Atlas: T0034

Mar 20, 2025 ·
Share on:

Read More
Mitre Atlas: T0046

Mar 20, 2025 ·
Share on:

Read More
Mitre Atlas: T0051

Mar 20, 2025 ·
Share on:

Read More
Mitre Atlas: T0054

Mar 20, 2025 ·
Share on:

Read More
Threat: Lightning Framework

Mar 20, 2025 ·
Share on:

Read More
Threat: Orbit

Mar 20, 2025 ·
Share on:

Read More
Threat: Rootkit

Mar 20, 2025 ·
Share on:

Read More
Threat: TripleCross

Mar 20, 2025 ·
Share on:

Read More
Use Case: Policy Violation

Mar 20, 2025 ·
Share on:

Read More
Use Case: Potential Overload

Mar 20, 2025 ·
Share on:

Read More
Use Case: Resource Exhaustion

Mar 20, 2025 ·
Share on:

Read More
Use Case: UEBA

Mar 20, 2025 ·
Share on:

Read More
Use Case: Privileged Access Detection

Mar 20, 2025 ·
Share on:

Read More
stp.1u

Mar 18, 2025 ·
Share on:

Read More
attack.t1003.004

Mar 18, 2025 ·
Share on:

Read More
attack.t1003.005

Mar 18, 2025 ·
Share on:

Read More
attack.t1003.006

Mar 18, 2025 ·
Share on:

Read More
attack.t1083

Mar 18, 2025 ·
Share on:

Read More
attack.t1133

Mar 18, 2025 ·
Share on:

Read More
attack.t1219

Mar 18, 2025 ·
Share on:

Read More
attack.t1564.003

Mar 18, 2025 ·
Share on:

Read More
attack.t1570

Mar 18, 2025 ·
Share on:

Read More
dist.public

Mar 18, 2025 ·
Share on:

Read More
Data Source: Elastic Defend for Containers

Mar 14, 2025 ·
Share on:

Read More
attack.t1543.002

Mar 4, 2025 ·
Share on:

Read More
attack.t1070.004

Mar 4, 2025 ·
Share on:

Read More
cve.2024-3400

Mar 4, 2025 ·
Share on:

Read More
Rule Type: BBR

Mar 4, 2025 ·
Share on:

Read More
car.2013-05-009

Feb 25, 2025 ·
Share on:

Read More
Cryptocurrency

Feb 24, 2025 ·
Share on:

Read More
cve.2024-35250

Feb 24, 2025 ·
Share on:

Read More
Data Source: AWS SNS

Feb 20, 2025 ·
Share on:

Read More
Tactic: Resource Development

Feb 20, 2025 ·
Share on:

Read More
Data Source: Google Workspace

Feb 20, 2025 ·
Share on:

Read More
Data Source: Okta

Feb 20, 2025 ·
Share on:

Read More
attack.s0183

Feb 17, 2025 ·
Share on:

Read More
attack.t1573

Feb 17, 2025 ·
Share on:

Read More
Threat: BPFDoor

Feb 5, 2025 ·
Share on:

Read More
Data Source: Amazon EC2

Feb 3, 2025 ·
Share on:

Read More
attack.t1016

Feb 3, 2025 ·
Share on:

Read More
attack.t1070.005

Feb 3, 2025 ·
Share on:

Read More
attack.t1218.008

Feb 3, 2025 ·
Share on:

Read More
attack.t1547.003

Feb 3, 2025 ·
Share on:

Read More
attack.t1547.010

Feb 3, 2025 ·
Share on:

Read More
attack.t1564.001

Feb 3, 2025 ·
Share on:

Read More
cve.2024-1212

Feb 3, 2025 ·
Share on:

Read More
Data Source: AWS Secrets Manager

Feb 3, 2025 ·
Share on:

Read More
Data Source: Jamf Protect

Feb 3, 2025 ·
Share on:

Read More
attack.s0005

Jan 31, 2025 ·
Share on:

Read More
Data Source: AWS SSM

Jan 31, 2025 ·
Share on:

Read More
Data Source: AWS Systems Manager

Jan 31, 2025 ·
Share on:

Read More
attack.t1221

Jan 30, 2025 ·
Share on:

Read More
cve.2023-22518

Jan 30, 2025 ·
Share on:

Read More
cve.2023-27997

Jan 30, 2025 ·
Share on:

Read More
cve.2023-34362

Jan 30, 2025 ·
Share on:

Read More
cve.2023-46214

Jan 30, 2025 ·
Share on:

Read More
cve.2023-46747

Jan 30, 2025 ·
Share on:

Read More
cve.2023-4966

Jan 30, 2025 ·
Share on:

Read More
cve.2024-1708

Jan 30, 2025 ·
Share on:

Read More
cve.2024-1709

Jan 30, 2025 ·
Share on:

Read More
cve.2024-50623

Jan 30, 2025 ·
Share on:

Read More
attack.t1027.001

Jan 30, 2025 ·
Share on:

Read More
attack.t1136.001

Jan 22, 2025 ·
Share on:

Read More
attack.t1055.001

Jan 22, 2025 ·
Share on:

Read More
Data Source: Amazon S3

Jan 22, 2025 ·
Share on:

Read More
Data Source: System

Jan 22, 2025 ·
Share on:

Read More
Data Source: Amazon Route53

Jan 22, 2025 ·
Share on:

Read More
Data Source: AWS Lambda

Jan 22, 2025 ·
Share on:

Read More
Data Source: AWS RDS

Jan 22, 2025 ·
Share on:

Read More
Data Source: AWS Redshift

Jan 22, 2025 ·
Share on:

Read More
Data Source: AWS Route53

Jan 22, 2025 ·
Share on:

Read More
Data Source: AWS Service Quotas

Jan 22, 2025 ·
Share on:

Read More
Data Source: AWS Signin

Jan 22, 2025 ·
Share on:

Read More
Data Source: AWS SQS

Jan 22, 2025 ·
Share on:

Read More
Data Source: Cloudformation

Jan 22, 2025 ·
Share on:

Read More
Data Source: CyberArk PAS

Jan 22, 2025 ·
Share on:

Read More
Data Source: File Integrity Monitoring

Jan 22, 2025 ·
Share on:

Read More
Data Source: GCP

Jan 22, 2025 ·
Share on:

Read More
Data Source: Google Cloud Platform

Jan 22, 2025 ·
Share on:

Read More
Data Source: Zoom

Jan 22, 2025 ·
Share on:

Read More
Use Case: C2 Beaconing Detection

Jan 22, 2025 ·
Share on:

Read More
Use Case: Data Exfiltration Detection

Jan 22, 2025 ·
Share on:

Read More
Use Case: Guided Onboarding

Jan 22, 2025 ·
Share on:

Read More
Use Case: Lateral Movement Detection

Jan 22, 2025 ·
Share on:

Read More
cve.2023-36874

Jan 15, 2025 ·
Share on:

Read More
cve.2024-49113

Jan 8, 2025 ·
Share on:

Read More
attack.s0002

Jan 6, 2025 ·
Share on:

Read More
attack.t1021.007

Jan 6, 2025 ·
Share on:

Read More
attack.t1056

Jan 6, 2025 ·
Share on:

Read More
attack.t1213.003

Jan 6, 2025 ·
Share on:

Read More
attack.t1550.001

Jan 6, 2025 ·
Share on:

Read More
attack.t1586

Jan 6, 2025 ·
Share on:

Read More
attack.t1614.001

Jan 6, 2025 ·
Share on:

Read More
cve.2022-42475

Jan 6, 2025 ·
Share on:

Read More
attack.t1197

Dec 27, 2024 ·
Share on:

Read More
attack.t1588

Dec 27, 2024 ·
Share on:

Read More
attack.s0195

Dec 14, 2024 ·
Share on:

Read More
attack.t1027.005

Dec 14, 2024 ·
Share on:

Read More
attack.t1553.002

Dec 14, 2024 ·
Share on:

Read More
attack.g0069

Dec 1, 2024 ·
Share on:

Read More
attack.t1134

Dec 1, 2024 ·
Share on:

Read More
attack.t1134.002

Dec 1, 2024 ·
Share on:

Read More
attack.t1218.003

Dec 1, 2024 ·
Share on:

Read More
attack.t1574.011

Dec 1, 2024 ·
Share on:

Read More
car.2019-04-001

Dec 1, 2024 ·
Share on:

Read More
cve.2019-1388

Dec 1, 2024 ·
Share on:

Read More
cve.2021-41379

Dec 1, 2024 ·
Share on:

Read More
attack.t1201

Dec 1, 2024 ·
Share on:

Read More
attack.t1055.012

Dec 1, 2024 ·
Share on:

Read More
attack.t1059.005

Dec 1, 2024 ·
Share on:

Read More
attack.t1098.003

Dec 1, 2024 ·
Share on:

Read More
attack.t1218.001

Dec 1, 2024 ·
Share on:

Read More
attack.t1595

Dec 1, 2024 ·
Share on:

Read More
cve.2023-38331

Dec 1, 2024 ·
Share on:

Read More
attack.g0093

Nov 25, 2024 ·
Share on:

Read More
attack.s0139

Nov 25, 2024 ·
Share on:

Read More
attack.t1134.004

Nov 25, 2024 ·
Share on:

Read More
attack.t1212

Nov 25, 2024 ·
Share on:

Read More
attack.t1220

Nov 25, 2024 ·
Share on:

Read More
attack.t1543

Nov 25, 2024 ·
Share on:

Read More
attack.t1599.001

Nov 25, 2024 ·
Share on:

Read More
attack.t1622

Nov 25, 2024 ·
Share on:

Read More
cve.2021-21551

Nov 25, 2024 ·
Share on:

Read More
cve.2022-41120

Nov 25, 2024 ·
Share on:

Read More
cve.2023-21746

Nov 25, 2024 ·
Share on:

Read More
attack.t1036.002

Nov 18, 2024 ·
Share on:

Read More
Suspicious sender

Nov 13, 2024 ·
Share on:

Read More
attack.t1090.001

Nov 1, 2024 ·
Share on:

Read More
attack.t1491.001

Nov 1, 2024 ·
Share on:

Read More
attack.t1518.001

Nov 1, 2024 ·
Share on:

Read More
attack.t1546.011

Nov 1, 2024 ·
Share on:

Read More
attack.t1560

Nov 1, 2024 ·
Share on:

Read More
attack.t1587.001

Nov 1, 2024 ·
Share on:

Read More
car.2019-04-004

Nov 1, 2024 ·
Share on:

Read More
attack.t1649

Oct 8, 2024 ·
Share on:

Read More
attack.t1176

Oct 1, 2024 ·
Share on:

Read More
attack.t1518

Oct 1, 2024 ·
Share on:

Read More
attack.t1546.007

Oct 1, 2024 ·
Share on:

Read More
attack.t1587

Sep 22, 2024 ·
Share on:

Read More
attack.command_and_control

Sep 21, 2024 ·
Share on:

Read More
attack.t1110.001

Sep 13, 2024 ·
Share on:

Read More
attack.t1574

Sep 13, 2024 ·
Share on:

Read More
car.2013-07-002

Sep 13, 2024 ·
Share on:

Read More
cve.2021-1675

Sep 13, 2024 ·
Share on:

Read More
cve.2021-34527

Sep 13, 2024 ·
Share on:

Read More
attack.s0029

Sep 9, 2024 ·
Share on:

Read More
attack.t1578

Sep 9, 2024 ·
Share on:

Read More
attack.t1578.003

Sep 9, 2024 ·
Share on:

Read More
attack.t1484.001

Sep 6, 2024 ·
Share on:

Read More
attack.t1547

Sep 6, 2024 ·
Share on:

Read More
attack.t1059.006

Sep 2, 2024 ·
Share on:

Read More
cve.2021-44228

Sep 2, 2024 ·
Share on:

Read More
cve.2022-22954

Sep 2, 2024 ·
Share on:

Read More
cve.2023-27363

Sep 2, 2024 ·
Share on:

Read More
cve.2023-43621

Sep 2, 2024 ·
Share on:

Read More
cve.2022-29072

Aug 29, 2024 ·
Share on:

Read More
attack.t1216

Aug 29, 2024 ·
Share on:

Read More
detection.threat-hunting

Aug 29, 2024 ·
Share on:

Read More
attack.s0190

Aug 23, 2024 ·
Share on:

Read More
attack.t1027.009

Aug 13, 2024 ·
Share on:

Read More
attack.g0001

Aug 12, 2024 ·
Share on:

Read More
attack.g0004

Aug 12, 2024 ·
Share on:

Read More
attack.g0007

Aug 12, 2024 ·
Share on:

Read More
attack.g0020

Aug 12, 2024 ·
Share on:

Read More
attack.g0022

Aug 12, 2024 ·
Share on:

Read More
attack.g0030

Aug 12, 2024 ·
Share on:

Read More
attack.g0035

Aug 12, 2024 ·
Share on:

Read More
attack.g0045

Aug 12, 2024 ·
Share on:

Read More
attack.g0046

Aug 12, 2024 ·
Share on:

Read More
attack.g0047

Aug 12, 2024 ·
Share on:

Read More
attack.g0049

Aug 12, 2024 ·
Share on:

Read More
attack.g0050

Aug 12, 2024 ·
Share on:

Read More
attack.g0060

Aug 12, 2024 ·
Share on:

Read More
attack.g0064

Aug 12, 2024 ·
Share on:

Read More
attack.g0080

Aug 12, 2024 ·
Share on:

Read More
attack.g0091

Aug 12, 2024 ·
Share on:

Read More
attack.g0115

Aug 12, 2024 ·
Share on:

Read More
attack.g0125

Aug 12, 2024 ·
Share on:

Read More
attack.g0128

Aug 12, 2024 ·
Share on:

Read More
attack.g0129

Aug 12, 2024 ·
Share on:

Read More
attack.s0039

Aug 12, 2024 ·
Share on:

Read More
attack.s0040

Aug 12, 2024 ·
Share on:

Read More
attack.s0081

Aug 12, 2024 ·
Share on:

Read More
attack.s0106

Aug 12, 2024 ·
Share on:

Read More
attack.s0108

Aug 12, 2024 ·
Share on:

Read More
attack.s0111

Aug 12, 2024 ·
Share on:

Read More
attack.s0154

Aug 12, 2024 ·
Share on:

Read More
attack.s0246

Aug 12, 2024 ·
Share on:

Read More
attack.s0349

Aug 12, 2024 ·
Share on:

Read More
attack.s0363

Aug 12, 2024 ·
Share on:

Read More
attack.s0402

Aug 12, 2024 ·
Share on:

Read More
attack.s0412

Aug 12, 2024 ·
Share on:

Read More
attack.s0482

Aug 12, 2024 ·
Share on:

Read More
attack.s0508

Aug 12, 2024 ·
Share on:

Read More
attack.s0575

Aug 12, 2024 ·
Share on:

Read More
attack.s0592

Aug 12, 2024 ·
Share on:

Read More
attack.t1001.003

Aug 12, 2024 ·
Share on:

Read More
attack.t1006

Aug 12, 2024 ·
Share on:

Read More
attack.t1008

Aug 12, 2024 ·
Share on:

Read More
attack.t1010

Aug 12, 2024 ·
Share on:

Read More
attack.t1014

Aug 12, 2024 ·
Share on:

Read More
attack.t1021.005

Aug 12, 2024 ·
Share on:

Read More
attack.t1027.002

Aug 12, 2024 ·
Share on:

Read More
attack.t1027.003

Aug 12, 2024 ·
Share on:

Read More
attack.t1027.004

Aug 12, 2024 ·
Share on:

Read More
attack.t1030

Aug 12, 2024 ·
Share on:

Read More
attack.t1036.004

Aug 12, 2024 ·
Share on:

Read More
attack.t1036.006

Aug 12, 2024 ·
Share on:

Read More
attack.t1037.001

Aug 12, 2024 ·
Share on:

Read More
attack.t1037.005

Aug 12, 2024 ·
Share on:

Read More
attack.t1039

Aug 12, 2024 ·
Share on:

Read More
attack.t1048.001

Aug 12, 2024 ·
Share on:

Read More
attack.t1048.003

Aug 12, 2024 ·
Share on:

Read More
attack.t1053.003

Aug 12, 2024 ·
Share on:

Read More
attack.t1056.001

Aug 12, 2024 ·
Share on:

Read More
attack.t1056.002

Aug 12, 2024 ·
Share on:

Read More
attack.t1059.002

Aug 12, 2024 ·
Share on:

Read More
attack.t1070.003

Aug 12, 2024 ·
Share on:

Read More
attack.t1070.006

Aug 12, 2024 ·
Share on:

Read More
attack.t1072

Aug 12, 2024 ·
Share on:

Read More
attack.t1074

Aug 12, 2024 ·
Share on:

Read More
attack.t1074.001

Aug 12, 2024 ·
Share on:

Read More
attack.t1090.003

Aug 12, 2024 ·
Share on:

Read More
attack.t1091

Aug 12, 2024 ·
Share on:

Read More
attack.t1095

Aug 12, 2024 ·
Share on:

Read More
attack.t1098.001

Aug 12, 2024 ·
Share on:

Read More
attack.t1102.002

Aug 12, 2024 ·
Share on:

Read More
attack.t1102.003

Aug 12, 2024 ·
Share on:

Read More
attack.t1104

Aug 12, 2024 ·
Share on:

Read More
attack.t1110.002

Aug 12, 2024 ·
Share on:

Read More
attack.t1114.001

Aug 12, 2024 ·
Share on:

Read More
attack.t1115

Aug 12, 2024 ·
Share on:

Read More
attack.t1119

Aug 12, 2024 ·
Share on:

Read More
attack.t1120

Aug 12, 2024 ·
Share on:

Read More
attack.t1124

Aug 12, 2024 ·
Share on:

Read More
attack.t1125

Aug 12, 2024 ·
Share on:

Read More
attack.t1132.001

Aug 12, 2024 ·
Share on:

Read More
attack.t1134.005

Aug 12, 2024 ·
Share on:

Read More
attack.t1136.002

Aug 12, 2024 ·
Share on:

Read More
attack.t1136.003

Aug 12, 2024 ·
Share on:

Read More
attack.t1137

Aug 12, 2024 ·
Share on:

Read More
attack.t1137.002

Aug 12, 2024 ·
Share on:

Read More
attack.t1137.003

Aug 12, 2024 ·
Share on:

Read More
attack.t1137.006

Aug 12, 2024 ·
Share on:

Read More
attack.t1189

Aug 12, 2024 ·
Share on:

Read More
attack.t1199

Aug 12, 2024 ·
Share on:

Read More
attack.t1200

Aug 12, 2024 ·
Share on:

Read More
attack.t1204.001

Aug 12, 2024 ·
Share on:

Read More
attack.t1216.001

Aug 12, 2024 ·
Share on:

Read More
attack.t1218.002

Aug 12, 2024 ·
Share on:

Read More
attack.t1218.013

Aug 12, 2024 ·
Share on:

Read More
attack.t1222

Aug 12, 2024 ·
Share on:

Read More
attack.t1222.001

Aug 12, 2024 ·
Share on:

Read More
attack.t1222.002

Aug 12, 2024 ·
Share on:

Read More
attack.t1484

Aug 12, 2024 ·
Share on:

Read More
attack.t1495

Aug 12, 2024 ·
Share on:

Read More
attack.t1499.001

Aug 12, 2024 ·
Share on:

Read More
attack.t1499.004

Aug 12, 2024 ·
Share on:

Read More
attack.t1505.002

Aug 12, 2024 ·
Share on:

Read More
attack.t1505.005

Aug 12, 2024 ·
Share on:

Read More
attack.t1525

Aug 12, 2024 ·
Share on:

Read More
attack.t1526

Aug 12, 2024 ·
Share on:

Read More
attack.t1539

Aug 12, 2024 ·
Share on:

Read More
attack.t1542.001

Aug 12, 2024 ·
Share on:

Read More
attack.t1542.003

Aug 12, 2024 ·
Share on:

Read More
attack.t1546.001

Aug 12, 2024 ·
Share on:

Read More
attack.t1546.002

Aug 12, 2024 ·
Share on:

Read More
attack.t1546.003

Aug 12, 2024 ·
Share on:

Read More
attack.t1546.004

Aug 12, 2024 ·
Share on:

Read More
attack.t1546.008

Aug 12, 2024 ·
Share on:

Read More
attack.t1546.009

Aug 12, 2024 ·
Share on:

Read More
attack.t1546.010

Aug 12, 2024 ·
Share on:

Read More
attack.t1546.012

Aug 12, 2024 ·
Share on:

Read More
attack.t1546.013

Aug 12, 2024 ·
Share on:

Read More
attack.t1546.014

Aug 12, 2024 ·
Share on:

Read More
attack.t1547.002

Aug 12, 2024 ·
Share on:

Read More
attack.t1547.004

Aug 12, 2024 ·
Share on:

Read More
attack.t1547.005

Aug 12, 2024 ·
Share on:

Read More
attack.t1547.006

Aug 12, 2024 ·
Share on:

Read More
attack.t1547.008

Aug 12, 2024 ·
Share on:

Read More
attack.t1547.009

Aug 12, 2024 ·
Share on:

Read More
attack.t1547.014

Aug 12, 2024 ·
Share on:

Read More
attack.t1547.015

Aug 12, 2024 ·
Share on:

Read More
attack.t1548.003

Aug 12, 2024 ·
Share on:

Read More
attack.t1550

Aug 12, 2024 ·
Share on:

Read More
attack.t1550.003

Aug 12, 2024 ·
Share on:

Read More
attack.t1552.003

Aug 12, 2024 ·
Share on:

Read More
attack.t1553.001

Aug 12, 2024 ·
Share on:

Read More
attack.t1553.005

Aug 12, 2024 ·
Share on:

Read More
attack.t1554

Aug 12, 2024 ·
Share on:

Read More
attack.t1555.001

Aug 12, 2024 ·
Share on:

Read More
attack.t1555.005

Aug 12, 2024 ·
Share on:

Read More
attack.t1556.002

Aug 12, 2024 ·
Share on:

Read More
attack.t1556.006

Aug 12, 2024 ·
Share on:

Read More
attack.t1557

Aug 12, 2024 ·
Share on:

Read More
attack.t1559

Aug 12, 2024 ·
Share on:

Read More
attack.t1559.001

Aug 12, 2024 ·
Share on:

Read More
attack.t1559.002

Aug 12, 2024 ·
Share on:

Read More
attack.t1561.001

Aug 12, 2024 ·
Share on:

Read More
attack.t1561.002

Aug 12, 2024 ·
Share on:

Read More
attack.t1562.006

Aug 12, 2024 ·
Share on:

Read More
attack.t1562.007

Aug 12, 2024 ·
Share on:

Read More
attack.t1562.010

Aug 12, 2024 ·
Share on:

Read More
attack.t1563.002

Aug 12, 2024 ·
Share on:

Read More
attack.t1564.006

Aug 12, 2024 ·
Share on:

Read More
attack.t1565

Aug 12, 2024 ·
Share on:

Read More
attack.t1565.001

Aug 12, 2024 ·
Share on:

Read More
attack.t1568

Aug 12, 2024 ·
Share on:

Read More
attack.t1568.002

Aug 12, 2024 ·
Share on:

Read More
attack.t1574.006

Aug 12, 2024 ·
Share on:

Read More
attack.t1574.007

Aug 12, 2024 ·
Share on:

Read More
attack.t1574.008

Aug 12, 2024 ·
Share on:

Read More
attack.t1574.012

Aug 12, 2024 ·
Share on:

Read More
attack.t1580

Aug 12, 2024 ·
Share on:

Read More
attack.t1588.001

Aug 12, 2024 ·
Share on:

Read More
attack.t1589

Aug 12, 2024 ·
Share on:

Read More
attack.t1590.002

Aug 12, 2024 ·
Share on:

Read More
attack.t1593.003

Aug 12, 2024 ·
Share on:

Read More
attack.t1595.002

Aug 12, 2024 ·
Share on:

Read More
attack.t1606

Aug 12, 2024 ·
Share on:

Read More
attack.t1620

Aug 12, 2024 ·
Share on:

Read More
attack.t1621

Aug 12, 2024 ·
Share on:

Read More
car.2013-01-002

Aug 12, 2024 ·
Share on:

Read More
car.2013-02-003

Aug 12, 2024 ·
Share on:

Read More
car.2013-03-001

Aug 12, 2024 ·
Share on:

Read More
car.2013-05-002

Aug 12, 2024 ·
Share on:

Read More
car.2013-05-004

Aug 12, 2024 ·
Share on:

Read More
car.2013-07-001

Aug 12, 2024 ·
Share on:

Read More
car.2013-08-001

Aug 12, 2024 ·
Share on:

Read More
car.2013-09-005

Aug 12, 2024 ·
Share on:

Read More
car.2013-10-002

Aug 12, 2024 ·
Share on:

Read More
car.2014-04-003

Aug 12, 2024 ·
Share on:

Read More
car.2014-11-003

Aug 12, 2024 ·
Share on:

Read More
car.2014-11-008

Aug 12, 2024 ·
Share on:

Read More
car.2015-04-001

Aug 12, 2024 ·
Share on:

Read More
car.2016-03-002

Aug 12, 2024 ·
Share on:

Read More
cve.2010-5278

Aug 12, 2024 ·
Share on:

Read More
cve.2014-6287

Aug 12, 2024 ·
Share on:

Read More
cve.2015-1641

Aug 12, 2024 ·
Share on:

Read More
cve.2017-0261

Aug 12, 2024 ·
Share on:

Read More
cve.2017-11882

Aug 12, 2024 ·
Share on:

Read More
cve.2017-5638

Aug 12, 2024 ·
Share on:

Read More
cve.2017-8759

Aug 12, 2024 ·
Share on:

Read More
cve.2018-13379

Aug 12, 2024 ·
Share on:

Read More
cve.2018-2894

Aug 12, 2024 ·
Share on:

Read More
cve.2019-11510

Aug 12, 2024 ·
Share on:

Read More
cve.2019-1378

Aug 12, 2024 ·
Share on:

Read More
cve.2019-14287

Aug 12, 2024 ·
Share on:

Read More
cve.2019-19781

Aug 12, 2024 ·
Share on:

Read More
cve.2019-3398

Aug 12, 2024 ·
Share on:

Read More
cve.2020-0688

Aug 12, 2024 ·
Share on:

Read More
cve.2020-10148

Aug 12, 2024 ·
Share on:

Read More
cve.2020-10189

Aug 12, 2024 ·
Share on:

Read More
cve.2020-1350

Aug 12, 2024 ·
Share on:

Read More
cve.2020-14882

Aug 12, 2024 ·
Share on:

Read More
cve.2020-28188

Aug 12, 2024 ·
Share on:

Read More
cve.2020-3452

Aug 12, 2024 ·
Share on:

Read More
cve.2020-5902

Aug 12, 2024 ·
Share on:

Read More
cve.2020-8193

Aug 12, 2024 ·
Share on:

Read More
cve.2020-8195

Aug 12, 2024 ·
Share on:

Read More
cve.2021-1678

Aug 12, 2024 ·
Share on:

Read More
cve.2021-2109

Aug 12, 2024 ·
Share on:

Read More
cve.2021-21972

Aug 12, 2024 ·
Share on:

Read More
cve.2021-21978

Aug 12, 2024 ·
Share on:

Read More
cve.2021-22005

Aug 12, 2024 ·
Share on:

Read More
cve.2021-22123

Aug 12, 2024 ·
Share on:

Read More
cve.2021-22893

Aug 12, 2024 ·
Share on:

Read More
cve.2021-26084

Aug 12, 2024 ·
Share on:

Read More
cve.2021-26814

Aug 12, 2024 ·
Share on:

Read More
cve.2021-26857

Aug 12, 2024 ·
Share on:

Read More
cve.2021-26858

Aug 12, 2024 ·
Share on:

Read More
cve.2021-27905

Aug 12, 2024 ·
Share on:

Read More
cve.2021-28480

Aug 12, 2024 ·
Share on:

Read More
cve.2021-33766

Aug 12, 2024 ·
Share on:

Read More
cve.2021-35211

Aug 12, 2024 ·
Share on:

Read More
cve.2021-36934

Aug 12, 2024 ·
Share on:

Read More
cve.2021-40444

Aug 12, 2024 ·
Share on:

Read More
cve.2021-40539

Aug 12, 2024 ·
Share on:

Read More
cve.2021-41773

Aug 12, 2024 ·
Share on:

Read More
cve.2021-42237

Aug 12, 2024 ·
Share on:

Read More
cve.2021-43798

Aug 12, 2024 ·
Share on:

Read More
cve.2021-44077

Aug 12, 2024 ·
Share on:

Read More
cve.2022-21587

Aug 12, 2024 ·
Share on:

Read More
cve.2022-24527

Aug 12, 2024 ·
Share on:

Read More
cve.2022-26134

Aug 12, 2024 ·
Share on:

Read More
cve.2022-26809

Aug 12, 2024 ·
Share on:

Read More
cve.2022-27925

Aug 12, 2024 ·
Share on:

Read More
cve.2022-30190

Aug 12, 2024 ·
Share on:

Read More
cve.2022-31656

Aug 12, 2024 ·
Share on:

Read More
cve.2022-31659

Aug 12, 2024 ·
Share on:

Read More
cve.2022-33891

Aug 12, 2024 ·
Share on:

Read More
cve.2022-36804

Aug 12, 2024 ·
Share on:

Read More
cve.2022-44877

Aug 12, 2024 ·
Share on:

Read More
cve.2022-46169

Aug 12, 2024 ·
Share on:

Read More
cve.2023-21554

Aug 12, 2024 ·
Share on:

Read More
cve.2023-2283

Aug 12, 2024 ·
Share on:

Read More
cve.2023-23752

Aug 12, 2024 ·
Share on:

Read More
cve.2023-25157

Aug 12, 2024 ·
Share on:

Read More
cve.2023-25717

Aug 12, 2024 ·
Share on:

Read More
cve.2023-36884

Aug 12, 2024 ·
Share on:

Read More
cve.2023-40477

Aug 12, 2024 ·
Share on:

Read More
stp.1k

Aug 12, 2024 ·
Share on:

Read More
stp.2a

Aug 12, 2024 ·
Share on:

Read More
stp.4u

Aug 12, 2024 ·
Share on:

Read More
( ͡° ͜ʖ ͡°)

Aug 10, 2024 ·
Share on:

Read More
attack.CommandAndControl

Aug 10, 2024 ·
Share on:

Read More
attack.Compiled.HTML.File

Aug 10, 2024 ·
Share on:

Read More
attack.credential_access

Aug 10, 2024 ·
Share on:

Read More
attack.CredentialAccess

Aug 10, 2024 ·
Share on:

Read More
attack.defense_evasion

Aug 10, 2024 ·
Share on:

Read More
attack.Defense-Evansion

Aug 10, 2024 ·
Share on:

Read More
attack.defense.evasion

Aug 10, 2024 ·
Share on:

Read More
attack.Exploitation for Privilege Escalation

Aug 10, 2024 ·
Share on:

Read More
attack.hidden.users

Aug 10, 2024 ·
Share on:

Read More
attack.initial_access

Aug 10, 2024 ·
Share on:

Read More
attack.lateral_movement

Aug 10, 2024 ·
Share on:

Read More
attack.privilege_escalation

Aug 10, 2024 ·
Share on:

Read More
attack.T1623

Aug 10, 2024 ·
Share on:

Read More
T1059.001

Aug 10, 2024 ·
Share on:

Read More
attack.s0552

Aug 2, 2024 ·
Share on:

Read More
Data Source: AWS CloudWatch

May 22, 2024 ·
Share on:

Read More
Malfam: QakBot

May 22, 2024 ·
Share on:

Read More
Malfam: Ave Maria

May 3, 2024 ·
Share on:

Read More
Malfam: Pikabot

May 2, 2024 ·
Share on:

Read More
Malfam: AtomicStealer

Apr 25, 2024 ·
Share on:

Read More
Malfam: MetaStealer

Apr 25, 2024 ·
Share on:

Read More
attack.s0357

Mar 26, 2024 ·
Share on:

Read More
attack.s0650

Mar 26, 2024 ·
Share on:

Read More
attack.t1114.003

Mar 26, 2024 ·
Share on:

Read More
attack.t1546.016

Mar 26, 2024 ·
Share on:

Read More
attack.t1574.013

Mar 26, 2024 ·
Share on:

Read More
Abusech: MalwareBazaar

Feb 23, 2024 ·
Share on:

Read More
CVE-2024-21413

Feb 15, 2024 ·
Share on:

Read More
CVE-2021-40444

Dec 19, 2023 ·
Share on:

Read More
Abusech: URLhaus

Nov 18, 2023 ·
Share on:

Read More
CVE-2023-38831

Oct 18, 2023 ·
Share on:

Read More
Malfam: Emotet

Oct 4, 2023 ·
Share on:

Read More
EICAR

Aug 21, 2023 ·
Share on:

Read More
attack.s0367

May 17, 2023 ·
Share on:

Read More
attack.s0521

May 10, 2023 ·
Share on:

Read More
attack.t1036.008

May 10, 2023 ·
Share on:

Read More
Elastic

May 5, 2023 ·
Share on:

Read More
Elastic Endgame

May 5, 2023 ·
Share on:

Read More
Host

May 5, 2023 ·
Share on:

Read More
Investigation Guide

May 5, 2023 ·
Share on:

Read More
Linux

May 5, 2023 ·
Share on:

Read More
Persistence

May 5, 2023 ·
Share on:

Read More
Threat Detection

May 5, 2023 ·
Share on:

Read More
attack.resource_development

Apr 21, 2023 ·
Share on:

Read More
attack.t1035

Apr 21, 2023 ·
Share on:

Read More
attack.t1043

Apr 21, 2023 ·
Share on:

Read More
attack.t1050

Apr 21, 2023 ·
Share on:

Read More
attack.t1110.003

Apr 21, 2023 ·
Share on:

Read More
attack.t1574.010

Apr 21, 2023 ·
Share on:

Read More
attack.t1583.006

Apr 21, 2023 ·
Share on:

Read More
attack.t1592

Apr 21, 2023 ·
Share on:

Read More
attack.t1619

Apr 21, 2023 ·
Share on:

Read More
car.2013-04-002

Apr 21, 2023 ·
Share on:

Read More
cve.2021.3156

Apr 21, 2023 ·
Share on:

Read More
Cloud

Mar 2, 2023 ·
Share on:

Read More
Continuous Monitoring

Mar 2, 2023 ·
Share on:

Read More
Google Workspace

Mar 2, 2023 ·
Share on:

Read More
Identity and Access

Mar 2, 2023 ·
Share on:

Read More
SecOps

Mar 2, 2023 ·
Share on:

Read More
Defense Evasion

Jan 9, 2023 ·
Share on:

Read More
Discovery

Jan 9, 2023 ·
Share on:

Read More
Monitoring

Jan 9, 2023 ·
Share on:

Read More
Network

Jan 9, 2023 ·
Share on:

Read More
Windows

Jan 9, 2023 ·
Share on:

Read More
attack.s0483

Dec 28, 2022 ·
Share on:

Read More
attack.t1027.006

Dec 28, 2022 ·
Share on:

Read More
attack.s1020

Dec 12, 2022 ·
Share on:

Read More
attack.g0092

Nov 22, 2022 ·
Share on:

Read More
attack.s0386

Nov 9, 2022 ·
Share on:

Read More
Configuration Audit

Nov 9, 2022 ·
Share on:

Read More
GCP

Nov 9, 2022 ·
Share on:

Read More
APM

Sep 19, 2022 ·
Share on:

Read More
Command and Control

Aug 3, 2022 ·
Share on:

Read More
Credential Access

Aug 1, 2022 ·
Share on:

Read More
Privilege Escalation

Aug 1, 2022 ·
Share on:

Read More
Execution

Jul 26, 2022 ·
Share on:

Read More
Initial Access

Jul 26, 2022 ·
Share on:

Read More
GTFOBins

May 25, 2022 ·
Share on:

Read More
Asset Visibility

Oct 26, 2021 ·
Share on:

Read More
AWS

Oct 26, 2021 ·
Share on:

Read More
macOS

Apr 21, 2021 ·
Share on:

Read More