← Library
splApache-2.0from splunk/security_content

Windows AD Object Owner Updated

AD Object Owner Updated. The owner provides Full control level privileges over the target AD Object. This event has significant impact alone and is also a precursor activity for hiding an AD object.

Quality
51
FP risk
Forks
0
Views
1
Rule source🔒 locked
🔒

Sign in to view the rule source

Free accounts can view the source for the top-ranked rules. Create one in seconds — no credit card required.

Sign in →