Discovery for highly-privileged accounts
Use this query to locate commands related to discovering highly privileged users in an environment, sometimes a precursor to ransomware
Microsoft Sentinel (KQL)

Use this query to locate commands related to discovering highly privileged users in an environment, sometimes a precursor to ransomware

Already have an account?