Group discovery (command)

Detects scenarios where an attacker attempts to enumerate local or domain groups via commandline.