Search and filter across all detection sources
54 rules
[BOMGAR] Beyond Trust account_group_changed
Objects for Protection Group Changed
Detects when protection group objects are updated.
Windows: Administrators Group Changed
Windows: Everyone Group Changed
Windows: Users Group Changed
Windows: Guests Group Changed
Windows: Replicators Group Changed
Windows: Authenticated Users Group Changed
Windows: Domain Admins Group Changed
Windows: Domain Users Group Changed
Windows: Domain Guests Group Changed
Windows: Domain Computers Group Changed
Windows: Domain Controllers Group Changed
Windows: Cert Publishers Group Changed
Windows: Schema Admins Group Changed
Windows: Enterprise Admins Group Changed
Windows: Power Users Group Changed
Windows: Account Operators Group Changed
Windows: Server Operators Group Changed
Windows: Print Operators Group Changed
Windows: Backup Operators Group Changed
Windows Authorization Access Group Changed
Windows: Cryptographic Operators Group Changed
Windows: Security Enabled Local Group Changed
Windows: Security Enabled Global Group Changed