Possible Impacket SecretDump Remote Activity - Zeek

심각도 높음 Sigma 탐지 룰. Detect AD credential dumping using impacket secretdump HKTL. Based on the SIGMA rules/windows/builtin/win_impacket_secretdump.yml

작성자: Samir Bousseaden, @neu5ron · 원본 라이선스: DRL 1.1 · SigmaHQ 원본