Active Directory Computer Enumeration with Get-AdComputer

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•13

Detects the usage of the 'Get-AdComputer' PowerShell cmdlet to enumerate computer objects or their properties within Active Directory. This activity is often performed during the discovery phase of an attack to map out the network environment.