Gpresult Display Group Policy Information

SigmaHQ Detections@sigmaHQ

•updated Nov 26, 2025•0•0•0

Detects cases in which a user uses the built-in Windows utility gpresult to display the Resultant Set of Policy (RSoP) information