Elastic low stable eql

Unusual Remote File Extension

An anomaly detection job has detected a remote file transfer with a rare extension, which could indicate potential lateral movement activity on the host.

View Source

Detection Logic

Field Validations

Loading…

Comments (0)

Loading comments...