Enumerate All Information With Whoami.EXE (c248c896-e412-4279-8c15-1c558067b6fa)
Detects the execution of "whoami.exe" with the "/all" flag
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Enumerate All Information With Whoami.EXE (c248c896-e412-4279-8c15-1c558067b6fa) | Sigma-Rules | System Owner/User Discovery - T1033 (03d7999c-1f4c-42cc-8373-e7690d318104) | Attack Pattern | 1 |