Detection rules › By event

LsaSrv

Event	Rules
Event ID 300	1
Event ID 6038	1
Event ID 6039	1

Event ID 300

1 detection rules reference this event. View event page.

Sigma (1)

Standard User In High Privileged Group severity medium

Event ID 6038

1 detection rules reference this event. View event page.

Sigma (1)

NTLMv1 Logon Between Client and Server severity medium T1550, T1550.002

Event ID 6039

1 detection rules reference this event. View event page.

Sigma (1)

NTLMv1 Logon Between Client and Server severity medium T1550, T1550.002