AD Privileged Users or Groups Reconnaissance

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•0

Detect priv users or groups recon based on 4661 eventid and known privileged users or groups SIDs