Elastic low stable eql
Unusual Remote File Extension
An anomaly detection job has detected a remote file transfer with a rare extension, which could indicate potential lateral movement activity on the host.
Detection Logic
Field Validations
Loading…
Comments (0)
Loading comments...