open-menu
closeme
High Command Line Entropy Detected for Privileged Commands
calendar
Jul 28, 2026
·
Data Source: Elastic Defend
Data Source: Linux Sysmon Logs
Use Case: Privileged Access Detection
Rule Type: ML
Rule Type: Machine Learning
Tactic: Privilege Escalation
Resources: Investigation Guide
·
Share on:
twitter
facebook
linkedin
copy
Spike in Privileged Command Execution by a User
calendar
Jul 28, 2026
·
Data Source: Elastic Defend
Data Source: Linux Sysmon Logs
Use Case: Privileged Access Detection
Rule Type: ML
Rule Type: Machine Learning
Tactic: Privilege Escalation
Resources: Investigation Guide
·
Share on:
twitter
facebook
linkedin
copy
Unusual Process Detected for Privileged Commands by a User
calendar
Jul 28, 2026
·
Data Source: Elastic Defend
Data Source: Linux Sysmon Logs
Use Case: Privileged Access Detection
Rule Type: ML
Rule Type: Machine Learning
Tactic: Privilege Escalation
Resources: Investigation Guide
·
Share on:
twitter
facebook
linkedin
copy
to-top