Possible DCSync Attack
심각도 높음 Sigma 탐지 룰. Detects remote RPC calls to MS-DRSR from non DC hosts, which could indicate DCSync / DCShadow attacks.
작성자: Sagie Dulce, Dekel Paz · 원본 라이선스: DRL 1.1 · SigmaHQ 원본
심각도 높음 Sigma 탐지 룰. Detects remote RPC calls to MS-DRSR from non DC hosts, which could indicate DCSync / DCShadow attacks.
작성자: Sagie Dulce, Dekel Paz · 원본 라이선스: DRL 1.1 · SigmaHQ 원본