Rule Info
Tags
attack.exfiltration DEMO
Modified
None
Author
Nasreddine Bencherchali (Nextron Systems)
Name
Active Directory Structure Export Via Ldifde.EXE
Description
Detects the execution of "ldifde.exe" in order to export organizational Active Directory structure.
Date
2023-03-14 00:00:00
Id
4f7a6757-ff79-46db-9687-66501a02d9ec
Type
Community Rule
Link to Public Repo
Scan your endpoints, forensic images or collected files with our portable scanner THOR