• CommunityEnterprisePlans
  • Intel Exchange
    Intel ExchangeDetections
  • Resources
  • About
  • Leaderboard
Join CommunitySign In
    All Detections

    Zscaler ZIA - Malware Detected in Web Traffic

    avatar
    GlassDiceBearhttps://www.dicebear.comhttps://creativecommons.org/publicdomain/zero/1.0/„Glass” (https://www.dicebear.com) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)
    KQL Cowboy@KQLCowboy
    •updated Aug 18, 2026•0•0•7

    Detects instances where Zscaler web security logs identify malware, threats, or viruses, specifically flagging users and destination hosts involved in these blocked or allowed security events.

    Splunk (SPL)

    Tags

    T1105 - Ingress Tool TransferT1203 - Exploitation for Client ExecutionTA0002 - ExecutionMalware DetectedNetwork Connection BlockedNetwork Connection AllowedNetwork GenericGeneric Security Tool Logsplkql

    Community Inspired.
    AI Enhanced.
    Better Detections.

    Follow Us

    Company

    • About
    • Leaderboard

    Product

    • Community
    • Enterprise
    • Plans

    © 2026 Copyright. All Rights Reserved.

    Privacy PolicyTerms of Service

    Sign up to view this detection

    or

    Already have an account?