open-menu
closeme
High Command Line Entropy Detected for Privileged Commands
calendar
Sep 19, 2026
·
Data Source: Elastic Defend
Data Source: Sysmon
Data Source: Linux Sysmon Logs
Use Case: Privileged Access Detection
Rule Type: ML
Rule Type: Machine Learning
Tactic: Privilege Escalation
Resources: Investigation Guide
Domain: Endpoint
Platform: Linux
OS: Linux
·
Share on:
twitter
facebook
linkedin
copy
Spike in Privileged Command Execution by a User
calendar
Sep 19, 2026
·
Data Source: Elastic Defend
Data Source: Sysmon
Data Source: Linux Sysmon Logs
Use Case: Privileged Access Detection
Rule Type: ML
Rule Type: Machine Learning
Tactic: Privilege Escalation
Resources: Investigation Guide
Domain: Endpoint
Platform: Linux
OS: Linux
·
Share on:
twitter
facebook
linkedin
copy
Unusual Process Detected for Privileged Commands by a User
calendar
Sep 19, 2026
·
Data Source: Elastic Defend
Data Source: Sysmon
Data Source: Linux Sysmon Logs
Use Case: Privileged Access Detection
Rule Type: ML
Rule Type: Machine Learning
Tactic: Privilege Escalation
Resources: Investigation Guide
Domain: Endpoint
Platform: Linux
OS: Linux
·
Share on:
twitter
facebook
linkedin
copy
to-top