Potential AD User Enumeration From Non-Machine Account (ab6bffca-beff-4baa-af11-6733f296d57a)

Detects read access to a domain user from a non-machine account

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Potential AD User Enumeration From Non-Machine Account (ab6bffca-beff-4baa-af11-6733f296d57a)	Sigma-Rules	Domain Account - T1087.002 (21875073-b0ee-49e3-9077-1e2a885359af)	Attack Pattern	1
Domain Account - T1087.002 (21875073-b0ee-49e3-9077-1e2a885359af)	Attack Pattern	Account Discovery - T1087 (72b74d71-8169-42aa-92e0-e7b04b9f5a08)	Attack Pattern	2