Skip to content
Threat Feed
Subscribe

Tag

Telemetry-Suppression

1 brief RSS
high advisory

Detection of Potential Defense Evasion via Endpoint Telemetry Suppression

This detection identifies adversary attempts to impair security monitoring by detecting a complete cessation of host telemetry immediately following a security alert generated by the Elastic Defend agent.

Elastic Defend defense-evasion telemetry-suppression endpoint-security
2t