TEMPLATE

SOC138 - Detected Suspicious Xls File

SOC141 - Phishing URL Detected

SOC165 - Possible SQL Injection Payload Detected

SOC137 - Malicious File/Script Download Attempt

SOC138 - Detected Suspicious Xls File

SOC117 - Suspicious .reg File

SOC335 — CVE-2024–49138 Exploitation Detected

EventID: 93 - [SOC146 - Phishing Mail Detected - Excel 4.0 Macros]

--SOC140 - Phishing Mail Detected - Suspicious Task Scheduler Name of triggered alert