ATT&CK technique
View on MITRE ATT&CK →
T1615
Group Policy Discovery
Discovery
8 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Group Policy Discovery via Microsoft GPResult Utility | production | 2026-09-18 |
| elastic | Enumeration Command Spawned via WMIPrvSE | production | 2026-09-18 |
| splunk | Windows WinPEAS PowerShell Script Execution | production | 2026-05-13 |
| sigma | HackTool - SharpUp PrivEsc Tool Execution | test | 2023-02-13 |
| sigma | Suspicious Reconnaissance Activity Via GatherNetworkInfo.VBS | test | 2023-02-08 |
| sigma | Potential Reconnaissance Activity Via GatherNetworkInfo.VBS | test | 2023-02-08 |
| sigma | Suspicious GPO Discovery With Get-GPO | test | 2022-06-04 |
| sigma | Gpresult Display Group Policy Information | test | 2022-05-01 |