Skip to content
Threat Feed
Subscribe

Tag

Security-Monitoring

3 briefs RSS
low advisory

Detection of Unauthorized Scheduled Task Modifications

This detection brief identifies potential persistence mechanisms where non-system users modify Windows scheduled tasks to execute malicious code.

Windows persistence security-monitoring
1r 1t
high advisory

Detection of LSASS Memory Dumping via Command Line Keywords

Detection of credential access attempts targeting the Local Security Authority Subsystem Service (LSASS) process via command-line arguments indicative of memory dump creation.

credential-access windows security-monitoring
1r 1t
medium advisory

Detection of Windows Defender Malware and Suspicious Activity Events

This brief outlines the monitoring of Windows Defender Antimalware events that indicate confirmed malware detections or suspicious system behavior.

windows security-monitoring informational
1r