Fraudulent Activity

Cleanup applications

This alert is triggered when a user on a Windows Client computer opens a PC cleanup application such as CCleaner, PC Decrapifier, File Shredder, or CleanUp.

The command prompt

This alert is triggered when a user on a Windows Client computer opens the command prompt.

Changing the Windows date/time

This alert is triggered when a user changes the date & time settings on a Windows Client computer.

Editing the Windows Registry

This alert is triggered when a user on a Windows Client computer edits the Windows Registry using the Windows Registry Editor.

Downloading a file using a web browser

This alert is triggered when a user on a Windows Client computer downloads a file via such Internet browsers as Chrome, Firefox, or Internet Explorer.

Uploading a file using a web browser

This alert is triggered when a user on a Windows Client computer uploads a file via such Internet browsers as Chrome, Firefox, or Internet Explorer.

Hacking software

This alert is triggered when a user on a Windows Client computer uses any kind of hacking software such as Angry IP Scanner, HashCat, Burp Suite, Cain & Abel, Ettercap, John The Ripper, Kali, Metasploit, Nmap (Network Mapper), Snort, THC Hydra, Wapiti, Wifite, or Wireshark.

IIS binding settings

This alert is triggered when a user on a Windows Client computer changes the IIS binding settings.

Internet Explorer proxy settings

This alert is triggered when a user on a Windows Client computer changes the Internet Explorer Proxy Settings.

Remote desktop connection

This alert is triggered when a user on a Windows Client computer initiates an RDP connection to another computer.

Creating/editing of a Windows user

This alert is triggered when a user on a Windows Client computer adds or edits a Windows user.

[Linux] Installation detection

This alert is triggered when a user on a Linux Client computer utilizes commands for installation.

[Linux] Root privileges

This alert is triggered when a user on a Linux Client computer grants root privileges to another user.

[Linux] Adding a user

This alert is triggered when a user on a Linux Client computer adds a user.