Active Directory Data Collection via LDAP

In an Active Directory LDAP query, (objectGUID=*) is a search filter that evaluates to TRUE for every object in the directory, meaning it will return all objects. This may indicate an attempt to dump AD database using tools such as ADExplorer for offline analysis or exfiltration.