Rules by Product and UseCase
April 15, 2026 · View on GitHub
Vendor: Unix
Product: Auditbeat
Use-Case: Cryptomining
| Rules | Models | MITRE ATT&CK® TTPs | Activity Types | Parsers |
|---|---|---|---|---|
| 1 | 0 | 1 | 1 | 0 |
| Event Type | Rules | Models |
|---|---|---|
| process-created | T1496 - Resource Hijacking ↳ A-EPA-Shadow-Mining-name: Process ending with 'miner.exe' has been run on this asset |