User with Privileges Logon
Detects logon with "Special groups" and "Special Privileges" can be thought of as Administrator groups or privileges.
Sigma

Detects logon with "Special groups" and "Special Privileges" can be thought of as Administrator groups or privileges.

Already have an account?