Search and filter across all detection sources
407 rules
The database engine detached a database
The database engine attached a database
PostgreSQL: Database query.
ClamAV: database update
Database engine started
Database engine stopped
Starting up database.
Sophos database updated
[EXTRAHOP] Poor Database Performance
[POSTGRESQL] Database authentication failure
Sqllib error: Database not simple
Index cleanup of database initiated
mysql_database_presence [capabilities]
This rule checks MySQL database presence
[CISCO-SCA] Potential Database Exfiltration
[EXTRAHOP] New Outbound Database Connection
[EXTRAHOP] Overwhelmed Database Data Transfer
[EXTRAHOP] Rare Database Table Access
The database engine stopped an instance
Failed verification for database page read
MS-DHCP: Database cleanup begin.
MS-DHCP: Database cleanup end.
Snowflake Drop Database [snowflake-database_query_history]
This use case detects the DROP DATABASE query. - Threat Actor Association: UNC5537 - Software Association: rapeflake
[CARBONBLACK-APP-CONTROL] Database error (Error)
[WINDOWS-AUTH] General account database changed