Active Directory Structure Export Via Ldifde.EXE

Rule Info

Tags
attack.exfiltration DEMO
Modified
None
Author
Nasreddine Bencherchali (Nextron Systems)
Name
Active Directory Structure Export Via Ldifde.EXE
Description
Detects the execution of "ldifde.exe" in order to export organizational Active Directory structure.
Date
2023-03-14 00:00:00
Id
4f7a6757-ff79-46db-9687-66501a02d9ec
Type
Community Rule

Rule History

Commit
Date
Author
Title
2023-03-15
Nasreddine Bencherchali
fix: apply suggestions from code review
2023-03-14
Nasreddine Bencherchali
fix: cicd errors
2023-03-14
Nasreddine Bencherchali
feat: new rules and update