Search and filter across all detection sources
917 rules
[CROWDSTRIKE] Possible Exfiltration Attempt Blocked - Adversary Exfiltrating Data From Host
[CROWDSTRIKE] Possible Exfiltration Attempt Detected - Adversary Exfiltrating Data From Host
[CROWDSTRIKE] Possible Exfiltration Attempt Killed - Adversary Exfiltrating Data From Host
[AWS-LAMBDA] Possible Exfiltration Attempt (GetObject) [100/60sec]
Google DNS - Possible data exfiltration
'Detects possible data exfiltration.'
[CROWDSTRIKE] Exfiltration Tactic Catchall
[EXTRAHOP] Data Exfiltration Activity
[MICROSOFT-ATP] Exfiltration alert
Digital Guardian - Exfiltration to external domain
'Detects exfiltration to external domain.'
Digital Guardian - Exfiltration to online fileshare
'Detects exfiltration to online fileshare.'
Digital Guardian - Exfiltration to private email
'Detects exfiltration to private email.'
Digital Guardian - Exfiltration using DNS protocol
'Detects exfiltration using DNS protocol.'
DNS Exfiltration and Tunneling Tools Execution
Well-known DNS Exfiltration tools execution
[CISCO-SCA] AWS Snapshot Exfiltration
[CISCO-SCA] Potential Data Exfiltration
[CISCO-SCA] Potential Database Exfiltration
[EXTRAHOP] Data Exfiltration to Dropbox
[EXTRAHOP] VPN Client Data Exfiltration
[NETSKOPE] anomaly alert - data_exfiltration
apt_apt41_powershell_exfiltration_script [yara_rules]
Detects PowerShell exfiltration script
Digital Guardian - Bulk exfiltration to external domain
'Detects bulk exfiltration to external domain.'
Potential Data Exfiltration Via Audio File
Detects potential exfiltration attempt via audio file using PowerShell