Attributed metadata history
Up to 100 retained publisher events per page for 7baefd6340082135f71f6f04216530cd59e10f4912faca5a8b7559099e4759a4. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_2009f6680f46118c1b
observed · 2026-10-12 07:28:02 UTC
New Rules new: Antivirus - APT Malware Signature new: Antivirus - Remote Access Tools Signature new: AppLocker Application Would Have Been Blocked new: Authencesn Crypto Module Load via Modprobe - Copy-Fail Indicator new: Curl File Upload To File Sharing Websites new: Failed Event Log Clear Via WMI NTEventLogFile ClearEventLog new: LSASS Crash Via Netlogon Stack Buffer Overflow - CVE-2026-41089 new: Linux AF_ALG Socket Creation - Kernel Crypto API Exploit Indicator new: NTLM Hash Leak Via Curl NTLM Authentication new: New Agent Skills Installation Attempt Via Node.EXE new: Process Execution from Shared Memory Directory new: RedTail Cryptominer User-Agent new: Registry Enumeration via WMI Stdregprov new: Signed DLL Loaded With Missing PE Version Metadata new: TanStack Supply-Chain Attack DNS Indicators new: TanStack Supply-Chain Attack Execution Indicators - Linux new: TanStack Supply-Chain Attack Execution Indicators - Windows new: TanStack Supply-Chain Attack File Creation Indicators - Linux new: TanStack Supply-Chain Attack File Creation Indicators - Windows new: Windows Defender Disabled Via SystemSettingsAdminFlows.EXE Updated Rules update: 7Zip Compressing Dump Files - Add
Fingerprint: dce829601290b4f4a4f0492578defe6d5d5e6d243979200520a31ef597a4215f
intelligence_src_2009f6680f46118c1b
observed · 2026-10-12 07:28:02 UTC
available
Fingerprint: 0770f7f331815970c09d7c7df4c1b4100c1c363dd891c2cad4eeab14d5b30017