Vulnerable Netlogon Secure Channel Connection Allowed

SigmaHQ Detections@sigmaHQ

•updated Apr 28, 2026•0•0•1

Detects that a vulnerable Netlogon secure channel connection was allowed, which could be an indicator of CVE-2020-1472.