Bulk AD User Enumeration via Get-ADUser Wildcard Filter

Luís Marques@remotecodeexecution

•updated today•0•0•1

Detects attempts to enumerate Active Directory user objects using the Get-ADUser cmdlet with wildcard filters. This technique is often employed by attackers to gather information about user accounts and their attributes.