Detection rules › By catalog entry

NETLOGON

Catalog entry	Rules
Event ID 5723	1
Event ID 5805	1
Event ID 5829	1

Event ID 5723

1 detection rules reference this catalog entry. View catalog entry.

Sigma (1)

Zerologon Exploitation Using Well-known Tools severity critical T1210

Event ID 5805

1 detection rules reference this catalog entry. View catalog entry.

Sigma (1)

Zerologon Exploitation Using Well-known Tools severity critical T1210

Event ID 5829

1 detection rules reference this catalog entry. View catalog entry.

Sigma (1)

Vulnerable Netlogon Secure Channel Connection Allowed severity high T1548

Back to all NETLOGON catalog entries