Search and filter across all detection sources
1,076 rules
[MCAS] ALERT_SUSPICIOUS_ACTIVITY
[OPENSSH] Fail2Ban SSH Suspicious Activity
[OKTA] USER HAS REPORTED SUSPICIOUS ACTIVITY
GSuite Device Suspicious Activity
GSuite reported a suspicious activity on a user's device.
[CISCO-MERAKI] [CRITICAL] Suspicious Activity Detected and Allowed
Okta User Suspicious Activity Reported
An Okta user reports suspicious activity in response to an end user security notification.
Okta User Reported Suspicious Activity [snowflake-okta]
Detect when a user has reported suspicious activity - Threat Actor Association: Scatter Swine
Okta User Reported Suspicious Activity [splunk-okta]
[EXTRAHOP] AdFind Activity
[EXTRAHOP] alert_name
[EXTRAHOP] BITS Download
[EXTRAHOP] BitTorrent Activity
[EXTRAHOP] Certsync Activity
[EXTRAHOP] Citrix Issues
[EXTRAHOP] DHCP Errors
[EXTRAHOP] DHCP Issues
[EXTRAHOP] DNS Errors
[EXTRAHOP] DNS Issues
[EXTRAHOP] DNS Rebinding
[EXTRAHOP] DNS Timeouts
[EXTRAHOP] DNS Tunnel
[EXTRAHOP] Domain Fronting
[EXTRAHOP] Email Errors
[EXTRAHOP] Email Issues
[EXTRAHOP] EternalBlue Exploit