Wazuh low stable xml

Windows: Authenticated Users Group Changed

Windows: Authenticated Users Group Changed

View Source

Detection Logic

ID:\s+%{S-1-5-11}
| ID:\s+S-1-5-11\s

Field Validations

Loading…

Comments (0)

Loading comments...