| splunk |
Get DomainPolicy with Powershell |
production |
2026-10-02 |
| splunk |
Get ADDefaultDomainPasswordPolicy with Powershell |
production |
2026-10-02 |
| elastic |
Entra ID Sign-in BloodHound Suite User-Agent Detected |
production |
2026-09-18 |
| elastic |
PowerShell Suspicious Discovery Related Windows API Functions |
production |
2026-09-18 |
| elastic |
Entra ID Sign-in TeamFiltration User-Agent Detected |
production |
2026-09-18 |
| splunk |
Get ADUserResultantPasswordPolicy with Powershell |
production |
2026-05-13 |
| splunk |
AWS High Number Of Failed Authentications For User |
production |
2026-05-13 |
| splunk |
AWS Password Policy Changes |
production |
2026-05-13 |
| splunk |
Get ADDefaultDomainPasswordPolicy with Powershell Script Block |
production |
2026-05-13 |
| splunk |
Get ADUserResultantPasswordPolicy with Powershell Script Block |
production |
2026-05-13 |
| splunk |
Get DomainPolicy with Powershell Script Block |
production |
2026-05-13 |
| splunk |
Windows Password Policy Discovery with Net |
production |
2026-05-13 |
| sigma |
Password Policy Discovery - Linux |
stable |
2024-12-01 |
| sigma |
Password Policy Enumerated |
test |
2023-05-19 |
| sigma |
HackTool - CrackMapExec Execution |
test |
2023-03-08 |
| sigma |
Cisco Discovery |
test |
2023-01-04 |
| sigma |
Net.EXE Execution |
test |
2022-07-11 |
| sigma |
Password Policy Discovery With Get-AdDefaultDomainPasswordPolicy |
test |
2022-03-17 |