PUA - PingCastle Execution (b1cb4ab6-ac31-43f4-adf1-d9d08957419c)
Detects the execution of PingCastle, a tool designed to quickly assess the Active Directory security level.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Active Scanning - T1595 (67073dde-d720-45ae-83da-b12d5e73ca3b) | Attack Pattern | PUA - PingCastle Execution (b1cb4ab6-ac31-43f4-adf1-d9d08957419c) | Sigma-Rules | 1 |