| Lateral Movement | security-alert
↳microsoft-scep-epp-alert
↳forefront-epp-cef-alert
↳raw-scep-epp-alert-csv
↳raw-scep-alert
↳json-microsoft-scep-epp-alert
↳raw-scep-epp-alert
↳s-scep-epp-alert
↳microsoft-scep-security-alert
↳cef-windows-defender
↳win-def-mal-detect
| T1027.005 - Obfuscated Files or Information: Indicator Removal from Tools
| |
| Malware | dlp-alert
↳s-o365-dlp-alert
↳s-o365-dlp-alert-1
↳s-o365-dlp-alert-2
security-alert
↳microsoft-scep-epp-alert
↳forefront-epp-cef-alert
↳raw-scep-epp-alert-csv
↳raw-scep-alert
↳json-microsoft-scep-epp-alert
↳raw-scep-epp-alert
↳s-scep-epp-alert
↳microsoft-scep-security-alert
↳cef-windows-defender
↳win-def-mal-detect
| TA0002 - TA0002
| |
| Privileged Activity | security-alert
↳microsoft-scep-epp-alert
↳forefront-epp-cef-alert
↳raw-scep-epp-alert-csv
↳raw-scep-alert
↳json-microsoft-scep-epp-alert
↳raw-scep-epp-alert
↳s-scep-epp-alert
↳microsoft-scep-security-alert
↳cef-windows-defender
↳win-def-mal-detect
| T1068 - Exploitation for Privilege Escalation
| |