Skip to content

Hide Navigation Hide TOC

ADSI-Cache File Creation By Uncommon Tool (75bf09fa-1dd7-4d18-9af9-dd9e492562eb)

Detects the creation of an "Active Directory Schema Cache File" (.sch) file by an uncommon tool.

Cluster A Galaxy A Cluster B Galaxy B Level
ADSI-Cache File Creation By Uncommon Tool (75bf09fa-1dd7-4d18-9af9-dd9e492562eb) Sigma-Rules Protocol Impersonation - T1001.003 (c325b232-d5bc-4dde-a3ec-71f3db9e8adc) Attack Pattern 1
Protocol Impersonation - T1001.003 (c325b232-d5bc-4dde-a3ec-71f3db9e8adc) Attack Pattern Data Obfuscation - T1001 (ad255bfe-a9e6-4b52-a258-8d3462abe842) Attack Pattern 2