Uncommon Connection to Active Directory Web Services

SigmaHQ Detections@sigmaHQ

•updated Jun 4, 2025•0•0•0

Detects uncommon network connections to the Active Directory Web Services (ADWS) from processes not typically associated with ADWS management.