https://omar-4.gitbook.io/omar-docs/ecir 1 2024-12-30T12:07:39.575Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/network-activity 0.84 https://omar-4.gitbook.io/omar-docs/ecir/event-codes/network-activity/event-id-5156 0.7 2024-12-30T12:18:02.432Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/network-activity/event-id-3 0.7 2024-12-30T12:20:47.546Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/initial-access 0.84 https://omar-4.gitbook.io/omar-docs/ecir/event-codes/initial-access/event-id-4624 0.7 2024-12-30T12:56:53.965Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/priv-esc 0.84 https://omar-4.gitbook.io/omar-docs/ecir/event-codes/priv-esc/event-id-4672 0.7 2024-12-30T12:46:31.394Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/priv-esc/event-id-4648 0.7 2024-12-30T12:56:54.483Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/priv-esc/event-id-4697 0.7 2024-12-30T12:56:54.064Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/priv-esc/event-id-4688 0.7 2024-12-30T12:56:54.316Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/priv-esc/event-id-1 0.7 2024-12-30T12:56:54.483Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/persistence 0.84 https://omar-4.gitbook.io/omar-docs/ecir/event-codes/persistence/event-id-11 0.7 2024-12-30T13:00:00.326Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/persistence/event-id-4698 0.7 2024-12-30T13:01:57.110Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/persistence/event-id-4699 0.7 2024-12-30T13:03:32.214Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/persistence/event-id-4701 0.7 https://omar-4.gitbook.io/omar-docs/ecir/event-codes/persistence-registry 0.84 https://omar-4.gitbook.io/omar-docs/ecir/event-codes/persistence-registry/event-id-4657 0.7 2024-12-30T13:11:02.742Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/persistence-registry/event-id-4658 0.7 2024-12-30T13:12:21.676Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/persistence-registry/event-id-4660 0.7 2024-12-30T13:18:19.693Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/persistence-registry/event-id-13 0.7 2024-12-30T13:15:40.860Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/persistence-registry/event-id-12 0.7 2024-12-30T13:15:40.848Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/powershell-detection 0.84 https://omar-4.gitbook.io/omar-docs/ecir/event-codes/powershell-detection/event-id-4104 0.7 2024-12-30T13:22:07.322Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/powershell-detection/event-id-4103 0.7 2024-12-30T13:24:29.291Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/buffer-overflow 0.84 https://omar-4.gitbook.io/omar-docs/ecir/event-codes/buffer-overflow/event-id-1000 0.7 2024-12-30T13:26:25.274Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/buffer-overflow/event-id-1001 0.7 https://omar-4.gitbook.io/omar-docs/ecir/event-codes/latreal-movement 0.84 https://omar-4.gitbook.io/omar-docs/ecir/event-codes/latreal-movement/event-id-4624 0.7 2024-12-30T14:08:38.604Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/latreal-movement/event-id-4625 0.7 2024-12-30T14:08:38.604Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/latreal-movement/event-id-4648 0.7 2024-12-30T14:12:23.461Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/latreal-movement/event-id-4778 0.7 2024-12-30T14:14:23.333Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/latreal-movement/event-id-4779 0.7 2024-12-30T14:15:30.428Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/latreal-movement/event-id-5140 0.7 2024-12-30T14:31:22.795Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/latreal-movement/event-id-5142 0.7 2024-12-30T14:31:22.795Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/latreal-movement/event-id-5143 0.7 2024-12-30T14:31:22.764Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/latreal-movement/event-id-4776 0.7 2024-12-30T15:28:55.166Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/latreal-movement/event-id-4768 0.7 2024-12-30T15:32:09.101Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/latreal-movement/event-id-4769 0.7 2024-12-30T15:34:48.238Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/latreal-movement/event-id-4771 0.7 2024-12-30T15:36:52.421Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/latreal-movement/event-id-7045 0.7 2024-12-30T15:46:34.003Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/dcsync-activity-detection 0.84 https://omar-4.gitbook.io/omar-docs/ecir/event-codes/dcsync-activity-detection/event-id-4625 0.7 2024-12-30T13:46:51.188Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/dcsync-activity-detection/event-id-4662 0.7 2024-12-30T13:43:06.059Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/golden-ticket 0.84 https://omar-4.gitbook.io/omar-docs/ecir/event-codes/golden-ticket/event-id-4769 0.7 https://omar-4.gitbook.io/omar-docs/ecir/event-codes/golden-ticket/event-id-4768 0.7 https://omar-4.gitbook.io/omar-docs/ecir/event-codes/golden-ticket/event-id-4624 0.7 2024-12-30T13:48:32.496Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/pass-the-hash 0.84 https://omar-4.gitbook.io/omar-docs/ecir/event-codes/pass-the-hash/event-id-4624 0.7 2024-12-30T13:54:24.351Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/pass-the-hash/event-id-4776 0.7 2024-12-30T13:50:25.088Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/pass-the-hash/event-id-4648 0.7 2024-12-30T13:56:59.080Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/pass-the-ticket 0.84 https://omar-4.gitbook.io/omar-docs/ecir/event-codes/pass-the-ticket/event-id-4769 0.7 2024-12-30T14:01:54.954Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/pass-the-ticket/event-id-4768 0.7 2024-12-30T14:03:23.562Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/pass-the-ticket/event-id-4770 0.7 2024-12-30T14:04:49.857Z https://omar-4.gitbook.io/omar-docs/ecir/event-codes/pass-the-ticket/event-id-4648 0.7 2024-12-30T14:04:49.857Z https://omar-4.gitbook.io/omar-docs/ecir/wireshark 1 https://omar-4.gitbook.io/omar-docs/ecir/wireshark/arp-poisoning 0.84 https://omar-4.gitbook.io/omar-docs/ecir/wireshark/buffer-overflow 0.84