https://docs-cortex.paloaltonetworks.com/r/Cortex-XSIAM/Cortex-XSIAM-Analytics-Alert-Reference-by-Alert-name/Rare-LOLBIN-Process-Execution-by-User?contentId=NAeyeg6W66uSvqqsShY7Dg
Rare LOLBIN Process Execution by User
Synopsis Activation Period 14 Days Training Period 30 Days Test Period N/A (single event) Deduplication Period 30 Days Required Data Requires: XDR Agent...
process executionrarelolbinuser
https://www.utwente.nl/en/eemcs/scs/education/assignments/finished-assignments/master/20221004-lolbin-detection-through-unsupervised-learning/
LOLBin detection through unsupervised learning | Finished Master Assignments | Semantics,...
unsupervised learningmaster assignmentslolbindetectionfinished
https://me-en.kaspersky.com/blog/tag/lolbin/
Tag: LOLBin | Kaspersky official blog
taglolbinkasperskyofficialblog
https://www.paloaltonetworks.com/blog/tag/lolbin-abuse/
LOLBin abuse Blogs | Palo Alto Networks
Read the latest blogs and insights about LOLBin abuse from Palo Alto Networks experts.
abuse blogspalo altololbinnetworks