Outbreak Detected

Description

Alerts when a potential outbreak is observed based on newly infected systems all exhibiting the same infection

Content Mapping

This content is not mapped to any local saved search. Add mapping


Use Case

Security Monitoring

Category

Lateral Movement, Endpoint Compromise

Alert Volume

Alerts when a potential outbreak is observed based on newly infected systems all exhibiting the same infection

SPL Difficulty

Advanced

Journey

Stage 2

MITRE ATT&CK Tactics

Execution

MITRE ATT&CK Techniques

Execution

Data Sources

Anti-Virus or Anti-Malware