NTDS Exfiltration Filename Patterns

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•0

Detects creation of files with specific name patterns seen used in various tools that export the NTDS.DIT for exfiltration.