Kuwait Civil ID Exposure Detection

Ali AlEnezi@site

•updated Apr 5, 2026•8•0•329

This rule detects the exposure of Kuwaiti Civil ID numbers in various log sources, including process command lines, additional device event fields, and email subjects/sender addresses. A Kuwaiti Civil ID is identified by a 12-digit number starting with 1, 2, or 3.