Windows Background Intelligent Transfer Service (BITS) is a low-bandwidth, asynchronous file transfer mechanism exposed through Component Object Model (COM).\n BITS is commonly used by updaters, messengers, and other applications preferred to operate in the background (using available idle bandwidth) without interrupting other networked applications.\nFile transfer tasks are implemented as BITS jobs, which contain a queue of one or more file operations

Octodet BITS Jobs connecting to the Internet

Octodet suspicious process activity in a windows directory

Octodet spoofed windows process name-possible-malware

Octodet sigma win workflow compiler

Octodet sigma win wmi spwns powershell

Octodet sigma win wmi persistence script event consumer

Octodet sigma win webshell spawn

Octodet sigma win webshell detection

Octodet sigma win vul java remote debugging

Octodet sigma win usb device plugged

Active Directory

Windows

Pi-Hole

Linux

accurev

actiancevantage

actividentity

aforecloudlink

airdefense

airmagnet

airtightmc

alcatelomniswitch

apache

apachetomcat

apconintellapatch

appsecdbprotect

arborpeakflow

arborpeakflowsp

artifactory

arubaairwave

arubacppm

arubanetworks

astarosg

avectopg

aventail

avocentkvm

barracudasf

barracudawaf

beewarewaf

bigfix

bigip

bigipafm

bigipapm

bigipasm

bit9

blackberryes

bluecat

bluecoatdirector

bluecoatproxyav

bmcremedyitsm

brocadeswitch

cacheflowelff

caitm

casiteminder

celerra

checkpointfw

checkpointfw1

ciscoace

ciscoacsxp

ciscoasa

ciscoidsxml

ciscoiportesa

ciscoiportwsa

ciscolms

ciscomeraki

ciscomse

cisconac

cisconcm

cisconxos

ciscorouter

ciscosecagent

ciscosecureacs

ciscoucs

ciscowcs

ciscowlc

ciscoworks

citrixag

citrixns

citrixxa

clariion

clouderanavigator

courionpc

crossbeamc

cyberark

cyberoamutm

cylance

damballa

default

delldrac

dellswitch

detectit

rhlinux

dragonids

eeyeblink

eeyerem

eeyeretina

emcavamar

emcdatadomain

emcdocumentum

emcdpa

emcionixuim

emcisilon

emcnetworker

emcvplex

enterasysswitch

entercept

enterpriseitsfne

entrustig

epolicy

Microsoft

Accurev

Actiance

ActivIdentity

Afore

Airdefense

Airmagnet

Airtight

UNIX

Alcatel-Lucent

Apache

Apcon

AppSec

Arbor

Artifactory

Aruba

Astaro

Avecto

Aventail

Avocent

Barracuda

Beeware

BigFix

Big-IP

Bit9

BlueCat

Blue

Brocade

Check

Cisco

CiscoWorks

Citrix

Cloudera

Courion

Crossbeam

Cyber-Ark

Cyberoam

CylanceProtect

Damballa

Dell

Safestone

Dragon

eEye

Enterasys

Entercept

Enterprise-IT

Entrust

McAfee

Evidian

Fabric

FairWarning

FireEye

Forescout

Fortinet

F-Secure

GIT-SCM

GlobalSCAPE

Guardium

HP_UX

Huawei

HyTrust

Imperva

Infoblox

IntruShield

Invincea

iSeries

J4Care

JBoss

Jenkins

Juniper

Steel-Belted

Pulse

Kaspersky

Kernel-based

LANDesk

Lotus

Lumension

ManageEngine

Mazu

McKesson

Microdasys

MySQL

nCircle

Tenable

Netapp

Netasq

Netscreen

Netwitness

Rapid7