Search and filter across all detection sources
390 rules
VShell connection attempt successful
Chrome Remote Desktop attempt - connected
Chrome Remote Desktop attempt - disconnected
Created default configuration for user
Serv-U: Closed session
Fortigate: Configuration changed.
Serv-U: User logged out
VirusTotal: Error: Check credentials
telnetd: Remote host established a telnet connection.
VShell user successfully authenticated.
telnetd: Remote host invalid connection.
Docker: Error - denied action
Exim Auth failed
Chrome Remote Desktop attempt - disconnected ($(win.eventdata.data))
Puppet Master: Permission denied
Chrome Remote Desktop attempt - access denied
Chrome Remote Desktop attempt - Client connected $(win.eventdata.data)
OpenVPN: Certificate failed - Possible revoked user
MongoDB: Execute commands without the necessary privileges
Chrome Remote Desktop attempt - started connection from $(win.eventdata.data)
Serv-U: User logged in FTP/FTPS
Serv-U: User logged in SFTP (SSH)
Serv-U: User logged in HTTP/HTTPS
Exim brute force attack (multiple auth failures).
Docker: Copied a file from host to $(docker.Actor.Attributes.name)