Tag
high
advisory
Prohibited Network Traffic Allowed
2 rules 1 TTPThis analytic detects instances where prohibited network traffic is allowed, highlighting potential misconfigurations or policy violations that could lead to unauthorized access or data exfiltration, ultimately allowing attackers to bypass network defenses.
Secure Firewall Threat Defense +3
network
policy-violation
firewall
traffic-monitoring
2r
1t
low
advisory
Wallpaper Modification Detection
3 rules 1 TTPDetection of unauthorized or suspicious wallpaper modifications on endpoints can indicate malicious activity or policy violations.
Windows
endpoint
wallpaper
modification
registry
policy violation
3r
1t