Product
Community
Enterprise
Plans
Intel Exchange
Intel Exchange
Detections
Resources
About
Leaderboard
Join Community
Sign In
All Detections
Non-local logons with -500 account
Glass
DiceBear
https://www.dicebear.com
https://creativecommons.org/publicdomain/zero/1.0/
„Glass” (https://www.dicebear.com) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)
Azure Sentinel
@AzureSentinel
•
updated Jun 17, 2025
•
2
•
0
•
32
Non-local logons with the built-in administrator (-500) account.
Microsoft Sentinel (KQL)
Translate
Download
Copy
Sign up to view this detection
Next
or
Create account with Google
Create account with Microsoft
Already have an account?
Log in
