Directory Service Restore Mode(DSRM) Registry Value Tampering

심각도 높음 Sigma 탐지 룰. Detects changes to "DsrmAdminLogonBehavior" registry value. During a Domain Controller (DC) promotion, administrators create a Directory Ser…

작성자: Nischal Khadgi · 원본 라이선스: DRL 1.1 · SigmaHQ 원본