Florian Roth c6843d41bc Rule: Vssadmin / NTDS.dit activity

2017-03-17 00:23:55 +01:00

..

builtin

Rule: Access to ADMIN$ share

2017-03-14 14:53:03 +01:00

powershell

Sysmon as 'service' of product 'windows'

2017-03-13 09:23:08 +01:00

sysmon

Rule: Vssadmin / NTDS.dit activity

2017-03-17 00:23:55 +01:00