Detection rules › By catalog entry

Microsoft-Windows-LDAP-Client

Catalog entry	Rules
Event ID 30	1

Event ID 30

1 detection rules reference this catalog entry. View catalog entry.

Sigma (1)

Potential Active Directory Reconnaissance/Enumeration Via LDAP severity medium T1069,T1069.002,T1087,T1087.002,T1482

Back to all Microsoft-Windows-LDAP-Client catalog entries