Elastic low stable eql

Unusual Process Detected for Privileged Commands by a User

A machine learning job has detected an unusual process run for privileged commands by a user, indicating potential privileged access activity.

View Source

Detection Logic

Field Validations

Loading…

Comments (0)

Loading comments...