All Detections

Authentication Config Modified via LDAP

avatar
Darshan Thummar@Mighty
updated Jun 13, 2026003

Detects LDAP-based modification of authentication configurations for credential theft

Microsoft Sentinel (KQL)