valitydev/SigmaHQ
14
0
Fork 0
mirror of https://github.com/valitydev/SigmaHQ.git synced 2024-11-08 10:13:57 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Update win_susp_ntlm_rdp.yml

Browse Source
This commit is contained in:
4A616D6573 2020-05-22 13:28:56 +10:00 committed by GitHub
parent 0f8f5fb29c
commit daa3c5e053
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
rules/windows/builtin/win_susp_ntlm_rdp.yml
View File

@ -1,4 +1,5 @@
title: Potential Remote Desktop Connection to Non-Domain Host
id:
status: experimental
description: Detects logons using NTLM to hosts that are potentially not part of the domain.
references: