avatar

Jan Mulder

@Wolkenman
0 followers5 downloads14 copies0 likes128 views

16 detections

Detects the removal of user accounts from a specific sensitive Microsoft Entra ID group, which may indicate unauthorized group membership changes or potential privilege escalation activities.
avatar
Jan Mulder@Wolkenman
HuntingSpace
9 days ago
104
Summarizes the installed hotfixes and QFE descriptions across Windows devices to provide an overview of patch levels.
avatar
Jan Mulder@Wolkenman
HuntingSpace
5 days ago
001
Summarizes and counts devices based on their system enclosure model and SKU.
avatar
Jan Mulder@Wolkenman
HuntingSpace
5 days ago
001
This rule queries CPU inventory data and summarizes the number of devices by manufacturer and model.
avatar
Jan Mulder@Wolkenman
HuntingSpace
5 days ago
001
Detects and summarizes the encryption status and methods used for the Windows C: drive using the EncryptableVolume table.
avatar
Jan Mulder@Wolkenman
HuntingSpace
5 days ago
001
Summarizes the total physical memory in gigabytes across reporting devices to assist with hardware inventory and capacity planning.
avatar
Jan Mulder@Wolkenman
HuntingSpace
5 days ago
001
Page 2 of 2