Exchange server impersonation via PrivExchange relay attack
Detects scenarios where an attacker relays Exchange server authentication to abuse Exchange servers permissions and escalate privileges.
Sigma

Detects scenarios where an attacker relays Exchange server authentication to abuse Exchange servers permissions and escalate privileges.

Already have an account?