Skip to content
Threat Feed
Subscribe

Product

Lateral Movement Detection Integration

2 briefs RSS
low advisory

Unusual Remote File Size Detected by ML

An Elastic machine learning job detects unusually large file transfers by remote hosts, indicating potential lateral movement or data exfiltration by adversaries who consolidate data into single large files to avoid detection.

Elastic Defend +3 lateral-movement collection data-exfiltration machine-learning anomaly-detection elastic-defend
3t
low advisory

Unusual Process Writing Data to an External Device Detected by Machine Learning

Elastic's Data Exfiltration Detection integration leverages machine learning to identify rare processes writing data to external devices, indicating potential data exfiltration by adversaries using benign-looking processes.

Elastic Defend +15 exfiltration machine-learning elastic-defend endpoint lateral-movement rdp anomaly-detection privilege-escalation +29
22t