May 12, 2023 @ 09:21:03.90012Alert has 12 suppressed alerts, grouped on host.name · user.nameSuspicious PowerShell encoded command
May 12, 2023 @ 09:08:33.100199Alert has 199 suppressed alerts, grouped on host.name · user.name · source.ipMultiple failed logon attempts followed by success
May 12, 2023 @ 09:00:55.600—Unusual process execution by user
May 12, 2023 @ 07:41:12.000—Malware Detected - Elastic Endgame