Wazuh high stable xml
Windows: Enterprise Admins Group Changed
Windows: Enterprise Admins Group Changed
Detection Logic
ID:\s+%{S-1-5-21\S+-519}
| ID:\s+S-1-5-21\S+-519\sField Validations
Loading…
Comments (0)
Loading comments...
Windows: Enterprise Admins Group Changed
ID:\s+%{S-1-5-21\S+-519}
| ID:\s+S-1-5-21\S+-519\sLoading…
Loading comments...