Elastic low stable eql
Unusual Process Writing Data to an External Device
A machine learning job has detected a rare process writing data to an external device. Malicious actors often use benign-looking processes to mask their data exfiltration activities. The discovery of such a process that has no legitimate reason to write data to external devices can indicate exfiltration.
Detection Logic
Field Validations
Loading…
Comments (0)
Loading comments...