avatar

Shadows VMB

@Vemorian_Mort
Trusted contributorCompletionist
1 follower37 downloads923 copies20 likes2,913 views

121 detections

This rule retrieves a collection of raw telemetry events including process, file, registry, and network information for a specific host (ex. HostName123). It acts as a diagnostic or hunting query to list the most recent 5,000 activities performed on the specified machine.
avatar
Shadows VMB@Vemorian_Mort
avatar
Detections.ai Community
4 months ago
1029
Page 13 of 13