← All Findings
Vendor: Orca Security FIN-635 Weight: Confidence:

What It Detects

MITRE ATT&CK Techniques

Comma-separated, e.g. T1078, T1190

Checks read-only

FieldOperatorValue
Connectors match Orca
Extra_Data and [{'field': 'Status', 'value': 'stopped|terminated|shutoff', 'operator': 'match'}]

Remediation

Why It Matters

Export Lucidum