Computer Discovery And Export Via Get-ADComputer Cmdlet

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•15

Detects usage of the Get-ADComputer cmdlet to collect computer information and output it to a file. This activity is often seen in reconnaissance phases where attackers map out the network environment.