mdecrevoisier medium experimental sigma

Account password set to never expire.

Detects scenarios where an account password is set to never expire.

View Source

Detection Logic

{
  "selection": {
    "EventID": 4738,
    "UserAccountControl": "%%2089"
  },
  "condition": "selection"
}

False Positives

  • ⚠ IAM solution, User Management solutions

Field Validations

Loading…

Comments (0)

Loading comments...