Search and filter across all detection sources
5,635 rules
Multiple IDS alerts for same id,(ignoring now this id).
IDS event.
IDS enabled
IDS disabled
SQL Server process ID.
IDTools_For_WinXP_IdtTool [yara]
Chinese Hacktool Set - file IdtTool.exe
IDTools_For_WinXP_IdtTool [malware]
IDTools_For_WinXP_IdtTool_2 [yara]
Chinese Hacktool Set - file IdtTool.sys
IDTools_For_WinXP_IdtTool_2 [malware]
Ignored snort ids.
Identity Guard Log.
Snort IDS engine
Google Cloud Re-identifies Sensitive Information
Identifies when sensitive information is re-identified in google Cloud.
[JUNIPER] A running IDP policy was unloaded successfully from the IDP engine
AWS Identity Center Identity Provider Change
Detects a change in the AWS Identity Center (FKA AWS SSO) identity provider. A change in identity provider allows an attacker to establish persistent access or escalate privileges via user impersonation.
SAP BTP - Trust and authorization Identity Provider monitor
Identifies CRUD operations on Identity Provider settings within a sub account.
[CROWDSTRIKE] IdpDetectionSummaryEvent - Catch All
[LINUX-AUDITD] id execution
[ONELOGIN] TRUSTED_IDP_ADDED
[ONELOGIN] TRUSTED_IDP_MODIFIED
[ONELOGIN] TRUSTED_IDP_REMOVED
webshell_wsb_idc [yara]
Web Shell - file idc.php
ID_Application_Protector_12_ID_Security_Suite [packers]
ID_Application_Protector_V12_ID_Security_Suite [packers]