Threat intelligence / x-mitre-data-component
File Creation
A new file is created on a system or network storage. This action often signifies an operation such as saving a document, writing data, or deploying a file. Logging these events helps identify legitimate or potentially malicious file creation activities. Examples include logging file creation events (e.g., Sysmon Event ID 11 or Linux auditd logs).
x-mitre-data-component
Typex-mitre-data-component
External ID—
First seen2026-08-14
Last seen2026-08-14
Confidence
—
A new file is created on a system or network storage. This action often signifies an operation such as saving a document, writing data, or deploying a file. Logging these events helps identify legitimate or potentially malicious file creation activities. Examples include logging file creation events (e.g., Sysmon Event ID 11 or Linux auditd logs).
0 recorded
Relationships
No relationships recorded.
1 external