Vendor
medium
advisory
Multiple Vulnerabilities in Tenable Sensor Proxy
1 rule 1 TTP 5 CVEsMultiple vulnerabilities in Tenable Sensor Proxy versions prior to 1.4.0 could allow a remote attacker to cause a denial of service, data confidentiality breaches, and other unspecified security impacts.
Sensor Proxy
vulnerability
dos
dataleak
1r
1t
5c
high
advisory
Multiple Vulnerabilities in Tenable Network Monitor
2 rules 2 TTPs 5 CVEsMultiple vulnerabilities in Tenable Network Monitor versions prior to 6.5.4 can lead to remote denial of service, security policy bypass, and unspecified security issues.
Network Monitor
vulnerability
dos
security-bypass
2r
2t
5c
medium
threat
Kerberos Traffic from Unusual Process
2 rules 2 TTPsDetects network connections to the standard Kerberos port from an unusual process other than lsass.exe, potentially indicating Kerberoasting or Pass-the-Ticket activity on Windows systems.
Elastic Defend +22
kerberoasting
credential-access
lateral-movement
windows
2r
2t