Wazuh high stable xml

Windows: Schema Admins Group Changed

Windows: Schema Admins Group Changed

View Source

Detection Logic

ID:\s+%{S-1-5-21\.+-518}
| ID:\s+S-1-5-21\.+-518\s

Field Validations

Loading…

Comments (0)

Loading comments...