Summary: benign_noise: 1 event(s); first=auth.login_success


Summary: malware_execution: 1 event(s); first=edr.behavior_match


Summary: benign_noise: 1 event(s); first=net.port_scan_hit


Summary: c2_beacon: 1 event(s); first=net.beacon


Summary: malware_execution: 3 event(s); first=proc.lolbin_use


Summary: benign_noise: 1 event(s); first=net.beacon


Summary: malware_execution: 2 event(s); first=proc.lolbin_use


Summary: brute_force: 5 event(s); first=auth.login_failure


Summary: phishing: 1 event(s); first=email.link_clicked


Summary: brute_force: 8 event(s); first=auth.login_failure


Summary: brute_force: 7 event(s); first=auth.login_failure


Summary: benign_noise: 2 event(s); first=net.beacon


Summary: benign_noise: 2 event(s); first=net.dns_query


Summary: benign_noise: 2 event(s); first=net.port_scan_hit


Summary: malware_execution: 2 event(s); first=auth.login_success


Summary: c2_beacon: 2 event(s); first=net.beacon


Summary: benign_noise: 2 event(s); first=auth.login_success


Summary: malware_execution: 2 event(s); first=edr.behavior_match


Summary: malware_execution: 2 event(s); first=net.dns_query


Summary: brute_force: 8 event(s); first=net.outbound_connection


Summary: phishing: 2 event(s); first=email.link_clicked


Summary: phishing: 2 event(s); first=net.outbound_connection


Summary: c2_beacon: 2 event(s); first=net.outbound_connection


Summary: malware_execution: 4 event(s); first=proc.lolbin_use


Summary: brute_force: 10 event(s); first=net.dns_query


Summary: malware_execution: 2 event(s); first=net.outbound_connection


Summary: brute_force: 10 event(s); first=auth.login_success


Summary: brute_force: 9 event(s); first=auth.login_failure


Summary: brute_force: 7 event(s); first=auth.login_failure


Summary: phishing: 2 event(s); first=net.dns_query


Summary: brute_force: 9 event(s); first=net.outbound_connection


Summary: benign_noise: 2 event(s); first=net.outbound_connection


Summary: malware_execution: 2 event(s); first=auth.login_success


Summary: malware_execution: 3 event(s); first=proc.lolbin_use


Summary: benign_noise: 2 event(s); first=auth.login_success


Summary: benign_noise: 2 event(s); first=net.dns_query


Summary: malware_execution: 4 event(s); first=auth.login_success


Summary: phishing: 2 event(s); first=auth.login_success


Summary: benign_noise: 3 event(s); first=net.outbound_connection


Summary: malware_execution: 3 event(s); first=edr.behavior_match


Summary: brute_force: 11 event(s); first=net.dns_query


Summary: benign_noise: 3 event(s); first=auth.login_success


Summary: benign_noise: 3 event(s); first=net.beacon


Summary: phishing: 3 event(s); first=email.link_clicked


Summary: brute_force: 9 event(s); first=auth.login_failure


Summary: brute_force: 8 event(s); first=auth.login_success


Summary: benign_noise: 3 event(s); first=net.dns_query


Summary: phishing: 3 event(s); first=net.dns_query


Summary: benign_noise: 3 event(s); first=net.port_scan_hit


Summary: malware_execution: 4 event(s); first=proc.lolbin_use


Summary: malware_execution: 3 event(s); first=auth.login_success


Summary: malware_execution: 5 event(s); first=proc.lolbin_use


Summary: brute_force: 7 event(s); first=net.dns_query


Summary: malware_execution: 3 event(s); first=net.dns_query


Summary: malware_execution: 4 event(s); first=auth.login_success


Summary: malware_execution: 5 event(s); first=net.dns_query


Summary: malware_execution: 3 event(s); first=edr.behavior_match


Summary: malware_execution: 5 event(s); first=auth.login_success


Summary: c2_beacon: 3 event(s); first=net.beacon


Summary: c2_beacon: 3 event(s); first=net.outbound_connection


Summary: brute_force: 10 event(s); first=net.dns_query


Summary: benign_noise: 3 event(s); first=net.beacon


Summary: benign_noise: 4 event(s); first=net.beacon


Summary: c2_beacon: 4 event(s); first=net.beacon


Summary: benign_noise: 4 event(s); first=auth.login_success


Summary: malware_execution: 4 event(s); first=net.dns_query


Summary: phishing: 4 event(s); first=net.outbound_connection


Summary: benign_noise: 4 event(s); first=net.dns_query


Summary: malware_execution: 6 event(s); first=auth.login_success


Summary: benign_noise: 4 event(s); first=net.port_scan_hit


Summary: phishing: 4 event(s); first=net.dns_query


Summary: malware_execution: 6 event(s); first=net.outbound_connection


Summary: malware_execution: 6 event(s); first=proc.lolbin_use


Summary: benign_noise: 4 event(s); first=net.outbound_connection


Summary: malware_execution: 5 event(s); first=proc.lolbin_use


Summary: malware_execution: 4 event(s); first=net.outbound_connection


Summary: malware_execution: 5 event(s); first=net.dns_query


Summary: c2_beacon: 4 event(s); first=net.dns_query


Summary: brute_force: 10 event(s); first=auth.login_success


Summary: phishing: 4 event(s); first=email.link_clicked


Summary: malware_execution: 4 event(s); first=edr.behavior_match


Summary: c2_beacon: 4 event(s); first=net.outbound_connection


Summary: benign_noise: 4 event(s); first=auth.login_success


Summary: brute_force: 8 event(s); first=auth.login_failure


Summary: c2_beacon: 4 event(s); first=net.beacon


Summary: brute_force: 10 event(s); first=auth.login_failure


Summary: malware_execution: 6 event(s); first=auth.login_success