Suspicious Machine Account Replication - DcSync Indicator

심각도 보통 Sigma 탐지 룰. Detects suspicious Active Directory Replication Service (ADRS) requests originating from a machine account (SubjectUserName ending in ' ) r…" /> Suspicious Machine Account Replication - DcSync Indicator — Sigma 탐지 룰 | Sprout Security Detection Hub

) r…" />
) r…","inLanguage":"ko","url":"https://detection.sproutsecurity.app/rules/611eab06-a145-4dfa-a295-3ccc5c20f59a","dateModified":"2026-07-30","author":{"@type":"Person","name":"Benjamin Delpy, Florian Roth (Nextron Systems), Scott Dermett, Sorina Ionescu"}}
) r…" /> Suspicious Machine Account Replication - DcSync Indicator — Sigma 탐지 룰 | Sprout Security Detection Hub
) r…

관련 CVE: CVE-2026-54121

작성자: Benjamin Delpy, Florian Roth (Nextron Systems), Scott Dermett, Sorina Ionescu · 원본 라이선스: DRL 1.1 · SigmaHQ 원본

) r…" /> Suspicious Machine Account Replication - DcSync Indicator — Sigma 탐지 룰 | Sprout Security Detection Hub
) r…" />
) r…","inLanguage":"ko","url":"https://detection.sproutsecurity.app/rules/611eab06-a145-4dfa-a295-3ccc5c20f59a","dateModified":"2026-07-30","author":{"@type":"Person","name":"Benjamin Delpy, Florian Roth (Nextron Systems), Scott Dermett, Sorina Ionescu"}}
) r…" /> Suspicious Machine Account Replication - DcSync Indicator — Sigma 탐지 룰 | Sprout Security Detection Hub