Primary Refresh Token Access Attempt

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•1

Indicates access attempt to the PRT resource which can be used to move laterally into an organization or perform credential theft