# KB-Lists

* ABNORMAL\_FILES
* ACTINIUM\_DOMAINS
* ADMIN\_GROUPS
* ADMIN\_SOURCES
* ADMINS
* ALERT\_IRC\_PORT
* ALERT\_OPEN\_PORTS
* ALERT\_PRESENT\_EMPLOYEES
* ALERT\_UNUSUAL\_SOURCE
* ALLOWED\_PORTS
* ATTACK\_COMMANDS
* BAD\_RABBIT\_FILE
* BAD\_RABBIT\_HASH
* BLACKLIST\_IPS
* BLACKLISTED\_DOMAIN
* BLACKLISTED\_IP
* BLACKLISTED\_PORTS
* BLOCKED\_APPLICATION
* CHROME\_VPN\_EXTENSIONS
* CLOUD\_APP
* CLOUD\_APPLICATION\_IP
* CLOUD\_APPLICATIONS
* CONCERNED\_CONTENT
* CRIMINAL\_CONTENT
* CRITICAL\_FILE
* CRITICAL\_FILES
* CRITICAL\_FOLDER
* DEFAULT\_USERS
* DOMAIN
* DOPPELPAYMER\_RANSOMWARE\_CVE
* DRAGONFLY\_CNC\_REQUEST
* DYNAMIC\_CATEGORIES
* EDR\_PROCESS
* EXCLUDED\_USERS
* EXECUTABLES
* EXISTING\_USERS
* EXTREMIST\_CONTENT
* GHOSTWRITER\_IPS
* HERMETIC\_WIPER\_DRIVER\_HASHES
* HIDDEN\_COBRA\_FILE
* HIDDEN\_COBRA\_HASH
* HIDDEN\_COBRA\_IP
* HOME\_DIR
* HOME\_DOMAIN
* HOME\_FOLDER
* HOMENET
* HTTP\_ERROR
* INACTIVE\_USERS
* INVISIMOLE\_MALWARE\_HASHES
* KASPERSKY\_DETECTED\_MALWARE\_HASHES
* KASPERSKY\_UPDATE\_FAILURES
* KNOWN\_APPLICATIONS
* KNOWN\_DOMAINS
* KNOWN\_FILE
* KNOWN\_SERVER\_HOST
* LOCKERGOGA\_FILES
* MAGECART\_DOMAINS
* MAIL\_SERVER\_IP
* MAIL\_SERVERS
* MALICIOUS\_POWERSHELL\_COMMANDLET\_NAMES
* MALICIOUS\_TOOLS\_IMPHASH
* MALWARE\_EMAILS
* MALWARE\_FILES
* MALWARE\_HASH
* MALWARE\_IP
* MATRIX\_FILE
* MAZE\_RANSOMWARE\_DOMAINS
* MAZE\_RANSOMWARE\_EMAILS
* MOST\_EXPLOITABLE\_CVE
* MOST\_EXPLOITABLE\_DOMAINS
* MOST\_EXPLOITABLE\_EMAILS
* MOST\_EXPLOITABLE\_HASHES
* MOST\_EXPLOITABLE\_IPS
* NEFILIM\_RANSOMWARE\_EMAILS
* NEFILIM\_RANSOMWARE\_HASHES
* NON\_EXISTING\_USERS
* NON\_PCI\_COMPLIANT\_PORT
* POWERSPLOIT\_RECON\_MODULES
* PRIVILEGED\_USER
* PROWLI\_CVE
* PROWLI\_DOMAIN
* PROWLI\_EMAIL
* PROWLI\_FILE
* PROWLI\_HASH
* SERVER\_ADDRESS
* SQL\_INJECTION\_CHARACTER
* SQL\_INJECTION\_CHARACTERS
* SUSPICIOUS\_COUNTRY
* SUSPICIOUS\_DRIVER
* UNAPPROVED\_PORT
* VULNERABLE\_CONTENT
* VULNERABLE\_WORKSTATIONS
* WANNACRY\_DOMAIN
* WANNACRY\_EXTENSION
* WEBSERVER\_SYSTEMS
* WINADMINS
* WINDOWS\_DC
* XSS\_TAG
* YOUTUBE

For more details on Lists, go [here](https://app.gitbook.com/s/KXIpFdXJLhdyVghVnSDh/readme/a_work-with-your-log-data/search_your_log_data/build-a-search-query#lists).
