Detection rules › By catalog entry

LsaSrv

Catalog entry	Rules
Event ID 300	1
Event ID 6038	1
Event ID 6039	1

Event ID 300

1 detection rules reference this catalog entry. View catalog entry.

Sigma (1)

Standard User In High Privileged Group severity medium

Event ID 6038

1 detection rules reference this catalog entry. View catalog entry.

Sigma (1)

NTLMv1 Logon Between Client and Server severity medium T1550,T1550.002

Event ID 6039

1 detection rules reference this catalog entry. View catalog entry.

Sigma (1)

NTLMv1 Logon Between Client and Server severity medium T1550,T1550.002

Back to all LsaSrv catalog entries