SharpHound Recon Account Discovery (65f77b1e-8e79-45bf-bb67-5988a8ce45a5)
Detects remote RPC calls useb by SharpHound to map remote connections and local group membership.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Account Discovery - T1087 (72b74d71-8169-42aa-92e0-e7b04b9f5a08) | Attack Pattern | SharpHound Recon Account Discovery (65f77b1e-8e79-45bf-bb67-5988a8ce45a5) | Sigma-Rules | 1 |