Possible DC Shadow Attack (32e19d25-4aed-4860-a55a-be99cb0bf7ed)
Detects DCShadow via create new SPN
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Rogue Domain Controller - T1207 (564998d8-ab3e-4123-93fb-eccaa6b9714a) | Attack Pattern | Possible DC Shadow Attack (32e19d25-4aed-4860-a55a-be99cb0bf7ed) | Sigma-Rules | 1 |