Uncommon Connection to Active Directory Web Services (b3ad3c0f-c949-47a1-a30e-b0491ccae876)
Detects uncommon network connections to the Active Directory Web Services (ADWS) from processes not typically associated with ADWS management.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Uncommon Connection to Active Directory Web Services (b3ad3c0f-c949-47a1-a30e-b0491ccae876) | Sigma-Rules | Account Discovery - T1087 (72b74d71-8169-42aa-92e0-e7b04b9f5a08) | Attack Pattern | 1 |