Bulk AD Computer Enumeration via Get-ADComputer Wildcard Filter

Luís Marques@remotecodeexecution

•updated today•0•0•0

Detects attempts to enumerate Active Directory computer objects using the Get-ADComputer cmdlet with wildcard filters. This technique is often employed by attackers to gather information about networked devices and their configurations.