Elastic Endgame | Detection.FYI

Potential Shell via Web Server

May 5, 2023 · Elastic Host Linux Threat Detection Persistence Investigation Guide Elastic Endgame ·
Share on:

Identifies suspicious commands executed via a web server, which may suggest a vulnerability and remote shell access.

Read More
Threat Intel Filebeat Module (v7.x) Indicator Match

Jan 9, 2023 · Elastic Windows Elastic Endgame Network Continuous Monitoring SecOps Monitoring ·
Share on:

This rule is triggered when indicators from the Threat Intel Filebeat module (v7.x) has a match against local file or network observations.

Read More