Password Policy Enumerated

Rule Info

Name
Password Policy Enumerated
Author
Zach Mathis
Description
Detects when the password policy is enumerated.
Reference
https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-10/security/threat-protection/auditing/event-4661
Date
2023-05-19 00:00:00
Modified
None
Id
12ba6a38-adb3-4d6b-91ba-a7fb248e3199
Tags
attack.discovery attack.t1201
Type
Community Rule
Link to Public Repo
https://github.com/SigmaHQ/sigma/search?q=12ba6a38-adb3-4d6b-91ba-a7fb248e3199

Rule History

Author
Title
Date
Commit
Nasreddine Bencherchali
Merge PR #4950 from @nasbench - Comply With v2 Spec Changes
2024-08-12
598d29f81
Ryan Plas
Merge PR #4893 from @ryanplasma - Update Microsoft references URLS
2024-07-02
1d40f1d20
github-actions[bot]
Merge PR #4791 from @nasbench - Promote older rules status from `experimental` to `test`
2024-04-01
a8e1ecd65
Nasreddine Bencherchali
chore: update metadata
2023-05-18
bc0cdf541
Yamato Security
rename filename
2023-05-17
2b2988286
Yamato Security
new rule password policy enumerated
2023-05-17
4b3821391
THOR Logo  Scan your endpoints, forensic images or collected files with our portable scanner THOR
  Warning: Access to VALHALLA is rate-limited - once you prove unworthy, access gets denied
  Nextron Systems 2022