Rule Info
Name
Standard User In High Privileged Group
Description
Detect standard users login that are part of high privileged groups such as the Administrator group
Modified
None
Date
2023-01-13 00:00:00
Author
frack113
Tags
attack.credential_access DEMO attack.privilege_escalation
Id
7ac407cc-0f48-4328-aede-de1d2e6fef41
Type
Community Rule
Link to Public Repo
Scan your endpoints, forensic images or collected files with our portable scanner THOR