DT064
AWS CloudTrail, Resource Deletion - DT064
Contributor: The ITM Team @ - Detection DT064
DT065
GCP Cloud Audit Logs, Resource Deletion - DT065
Contributor: The ITM Team @ - Detection DT065
DT066
Azure Activity Log, Resource Deletion - DT066
Contributor: The ITM Team @ - Detection DT066
DT067
Financial Auditing - DT067
Contributor: The ITM Team @ - Detection DT067
DT068
Windows Event Log, Logon and Logoff - DT068
Contributor: The ITM Team @ - Detection DT068
DT082
Windows Event Log, Local Firewall Changes - DT082
Contributor: The ITM Team @ - Detection DT082
DT086
Shellbags, Network Drives - DT086
Contributor: The ITM Team @ - Detection DT086
DT089
AzureAD PowerShell Log - DT089
Contributor: The ITM Team @ - Detection DT089
DT090
Clipboard Payloads via ActivitiesCache.db - DT090
Contributor: The ITM Team @ - Detection DT090
DT093
MFT and Shimcache Executable Timestamp Comparison - DT093
Contributor: The ITM Team @ - Detection DT093