app:other

Other application logs

Host type: Other / unclassified
Techniques: 7
Rules listed: 173
Events: 1

Techniques

Rules

Splunk 21

Sigma 56

Default Credentials Usage by Alexandr Yampolskyi, SOC Prime
Django Framework Exceptions by Thomas Patzke
Host Without Firewall by Alexandr Yampolskyi, SOC Prime
OpenCanary - FTP Login Attempt by Security Onion Solutions
OpenCanary - GIT Clone Request by Security Onion Solutions
OpenCanary - HTTP GET Request by Security Onion Solutions
OpenCanary - HTTP POST Login Attempt by Security Onion Solutions
OpenCanary - HTTPPROXY Login Attempt by Security Onion Solutions
OpenCanary - Host Port Scan (SYN Scan) by Marco Pedrinazzi (@pedrinazziM)
OpenCanary - MSSQL Login Attempt Via SQLAuth by Security Onion Solutions
OpenCanary - MSSQL Login Attempt Via Windows Authentication by Security Onion Solutions
OpenCanary - MySQL Login Attempt by Security Onion Solutions
OpenCanary - NMAP FIN Scan by Marco Pedrinazzi (@pedrinazziM)
OpenCanary - NMAP NULL Scan by Marco Pedrinazzi (@pedrinazziM)
OpenCanary - NMAP OS Scan by Marco Pedrinazzi (@pedrinazziM)
OpenCanary - NMAP XMAS Scan by Marco Pedrinazzi (@pedrinazziM)
OpenCanary - NTP Monlist Request by Security Onion Solutions
OpenCanary - RDP New Connection Attempt by Marco Pedrinazzi (@pedrinazziM)
OpenCanary - REDIS Action Command Attempt by Security Onion Solutions
OpenCanary - SIP Request by Security Onion Solutions
OpenCanary - SMB File Open Request by Security Onion Solutions
OpenCanary - SNMP OID Request by Security Onion Solutions
OpenCanary - SSH Login Attempt by Security Onion Solutions
OpenCanary - SSH New Connection Attempt by Security Onion Solutions
OpenCanary - TFTP Request by Security Onion Solutions
OpenCanary - Telnet Login Attempt by Security Onion Solutions
OpenCanary - VNC Connection Attempt by Security Onion Solutions
Possible DCSync Attack by Sagie Dulce, Dekel Paz
Potential JNDI Injection Exploitation In JVM Based Application by Moti Harmats
Potential Local File Read Vulnerability In JVM Based Application by Moti Harmats
Potential OGNL Injection Exploitation In JVM Based Application by Moti Harmats
Potential RCE Exploitation Attempt In NodeJS by Moti Harmats
Potential Server Side Template Injection In Velocity by Moti Harmats
Potential SpEL Injection In Spring Framework by Moti Harmats
Potential XXE Exploitation Attempt In JVM Based Application by Moti Harmats
Process Execution Error In JVM Based Application by Moti Harmats
Python SQL Exceptions by Thomas Patzke
Recon Activity via SASec by Sagie Dulce, Dekel Paz
Remote DCOM/WMI Lateral Movement by Sagie Dulce, Dekel Paz
Remote Encrypting File System Abuse by Sagie Dulce, Dekel Paz
Remote Event Log Recon by Sagie Dulce, Dekel Paz
Remote Printing Abuse for Lateral Movement by Sagie Dulce, Dekel Paz
Remote Registry Lateral Movement by Sagie Dulce, Dekel Paz
Remote Registry Recon by Sagie Dulce, Dekel Paz
Remote Schedule Task Lateral Movement via ATSvc by Sagie Dulce, Dekel Paz
Remote Schedule Task Lateral Movement via ITaskSchedulerService by Sagie Dulce, Dekel Paz
Remote Schedule Task Lateral Movement via SASec by Sagie Dulce, Dekel Paz
Remote Schedule Task Recon via AtScv by Sagie Dulce, Dekel Paz
Remote Schedule Task Recon via ITaskSchedulerService by Sagie Dulce, Dekel Paz
Remote Server Service Abuse by Sagie Dulce, Dekel Paz
Remote Server Service Abuse for Lateral Movement by Sagie Dulce, Dekel Paz
Ruby on Rails Framework Exceptions by Thomas Patzke
SharpHound Recon Account Discovery by Sagie Dulce, Dekel Paz
SharpHound Recon Sessions by Sagie Dulce, Dekel Paz
Spring Framework Exceptions by Thomas Patzke
Suspicious SQL Error Messages by Bjoern Kimminich

Elastic 86

Microsoft Sentinel 10

Techniques

Rules

Events

Recommended (1)