User Logoff Event (0badd08f-c6a3-4630-90d3-6875cca440be)
Detects a user log-off activity. Could be used for example to correlate information during forensic investigations
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Account Access Removal - T1531 (b24e2a20-3b3d-4bf0-823b-1ed765398fb0) | Attack Pattern | User Logoff Event (0badd08f-c6a3-4630-90d3-6875cca440be) | Sigma-Rules | 1 |