Skip to content

Hide Navigation Hide TOC

Active Directory Computers Enumeration With Get-AdComputer (36bed6b2-e9a0-4fff-beeb-413a92b86138)

Detects usage of the "Get-AdComputer" to enumerate Computers or properties within Active Directory.

Cluster A Galaxy A Cluster B Galaxy B Level
Active Directory Computers Enumeration With Get-AdComputer (36bed6b2-e9a0-4fff-beeb-413a92b86138) Sigma-Rules Domain Account - T1087.002 (21875073-b0ee-49e3-9077-1e2a885359af) Attack Pattern 1
Active Directory Computers Enumeration With Get-AdComputer (36bed6b2-e9a0-4fff-beeb-413a92b86138) Sigma-Rules Remote System Discovery - T1018 (e358d692-23c0-4a31-9eb6-ecc13a8d7735) Attack Pattern 1
Domain Account - T1087.002 (21875073-b0ee-49e3-9077-1e2a885359af) Attack Pattern Account Discovery - T1087 (72b74d71-8169-42aa-92e0-e7b04b9f5a08) Attack Pattern 2