CS0-004-D1-12-10 — Host-Based Data Exfiltration Indicators
CS0-004-D1-12-09 — File-System Change Indicators
CS0-004-D1-12-08 — Living-off-the-Land Binaries and Malicious Scripts
CS0-004-D1-12-07 — Suspicious and Rogue Processes
CS0-004-D1-12-06 — Detecting Unauthorized Software
CS0-004-D1-12-05 — Abnormal Host Resource Consumption
CS0-004-D1-12-04 — Investigating Activity on Unexpected Ports
CS0-004-D1-12-03 — Analyzing Anomalous Network Activity
CS0-004-D1-12-02 — Recognizing Network Enumeration
CS0-004-D1-12-01 — Detecting Rogue Devices