| S. No | Device Type | Threat Indicators generated |
|---|---|---|
| 1. | Windows OS | Window Defender |
| Suspicious Windows Event | ||
| Object Access Status | ||
| Host Login | ||
| Suspicious Service / Process | ||
| Account Created / Enabled | ||
| Account Deleted / Disabled | ||
| Privilege Change | ||
| Network Logout | ||
| Directory Service Status | ||
| System Time | ||
| Group Policy Object | ||
| 2. | MSSQL | Login Success |
| Login Failure | ||
| Application | ||
| Object Access Status | ||
| 3. | Windows IIS | Web Exploit |
| 4. | Windows DNS | Suspicious Port Activity |
| Suspicious Domain | ||
| 5. | Windows DHCP | Application |
| 6. | Windows SMTP | Email Info |
| 7. | MS Exchange | Email Info |
Page Comparison
General
Content
Integrations