Alex Acosta

@razerTos71

0 followers5 downloads28 copies0 likes377 views

1 detection

All Time

Microsoft Sentinel (KQL)1

Windows1

Active Directory Domain Services1

Active Directory LDAP1

T1078.002 - Domain Accounts1

T1078.003 - Local Accounts1

KQL

Detects any authentication activity (successful or failed) for emergency break-glass administrative accounts

Detections.ai Community

11 months ago

280377