Detections
China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs
Public event hunting query
spl
· Evidence-linked query artifact; local execution not performed.
index=* ("China-Linked" OR "Fire") | stats count by host, user, process_name