Audit Policy Tampering Via Auditpol

심각도 높음 Sigma 탐지 룰. Threat actors can use auditpol binary to change audit policy configuration to impair detection capability. This can be carried out by select…

작성자: Janantha Marasinghe (https://github.com/blueteam0ps) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본