Anomalous User Activity (258b6593-215d-4a26-a141-c8e31c1299a6)
Indicates that there are anomalous patterns of behavior like suspicious changes to the directory.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Account Manipulation - T1098 (a10641f4-87b4-45a3-a906-92a149cb2c27) | Attack Pattern | Anomalous User Activity (258b6593-215d-4a26-a141-c8e31c1299a6) | Sigma-Rules | 1 |