[Rule Tuning] User Added to Privileged Group in Active Directory (#941)
* Update persistence_user_account_added_to_privileged_group_ad.toml * updated date
This commit is contained in:
@@ -1,10 +1,10 @@
|
||||
[metadata]
|
||||
creation_date = "2021/01/09"
|
||||
maturity = "production"
|
||||
updated_date = "2021/01/09"
|
||||
updated_date = "2021/02/10"
|
||||
|
||||
[rule]
|
||||
author = ["Skoetting"]
|
||||
author = ["Elastic", "Skoetting"]
|
||||
description = """
|
||||
Identifies a user being added to a privileged group in Active Directory. Privileged accounts and groups in Active
|
||||
Directory are those to which powerful rights, privileges, and permissions are granted that allow them to perform nearly
|
||||
|
||||
Reference in New Issue
Block a user