Potential Privilege Escalation via Local Kerberos Relay over LDAP

심각도 높음 Sigma 탐지 룰. Detects a suspicious local successful logon event where the Logon Package is Kerberos, the remote address is set to localhost, and the targe…

작성자: Elastic, @SBousseaden · 원본 라이선스: DRL 1.1 · SigmaHQ 원본