Gpresult Display Group Policy Information (e56d3073-83ff-4021-90fe-c658e0709e72)
Detects cases in which a user uses the built-in Windows utility gpresult to display the Resultant Set of Policy (RSoP) information
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Group Policy Discovery - T1615 (1b20efbf-8063-4fc3-a07d-b575318a301b) | Attack Pattern | Gpresult Display Group Policy Information (e56d3073-83ff-4021-90fe-c658e0709e72) | Sigma-Rules | 1 |