Invocation of Active Directory Diagnostic Tool (ntdsutil.exe)

심각도 보통 Sigma 탐지 룰. Detects execution of ntdsutil.exe, which can be used for various attacks against the NTDS database (NTDS.DIT)

작성자: Thomas Patzke · 원본 라이선스: DRL 1.1 · SigmaHQ 원본