14 published detections cite this
Citing it, not covering it: each of these was written with this as evidence, and carries the source it came from and the licence it was published under.
| Detection | Severity |
|---|---|
| Windows Root Domain linked policies Discovery | Informational |
| Windows Linked Policies In ADSI Discovery | Informational |
| Linux Auditd Stop Services | Medium |
| Linux Crontab Enumeration | Medium |
| Linux Adding Crontab Using List Parameter | Medium |
| Windows Processes Killed By Industroyer2 Malware | Informational |
| Windows Hidden Schedule Task Settings | Medium |
| Recon Using WMI Class | Informational |
| Linux Stop Services | Medium |
| Linux Shred Overwrite Command | Medium |
| Linux High Frequency Of File Deletion In Boot Folder | Medium |
| Linux Disable Services | Medium |
| Linux Deleting Critical Directory Using RM Command | Medium |
| Linux Auditd Shred Overwrite Command | Medium |
Showing 14 of 14