Account marked as sensitive and cannot be delegated had its protection removed (weakness introduction)
Detects scenarios where an attacker removes security protection from a sensitive account to escalate privileges
Sigma

Detects scenarios where an attacker removes security protection from a sensitive account to escalate privileges

Already have an account?