Detection rules › By event

NETLOGON

Event	Rules
Event ID 5723	1
Event ID 5805	1
Event ID 5829	1

Event ID 5723

1 detection rules reference this event. View event page.

Sigma (1)

Zerologon Exploitation Using Well-known Tools severity critical T1210

Event ID 5805

1 detection rules reference this event. View event page.

Sigma (1)

Zerologon Exploitation Using Well-known Tools severity critical T1210

Event ID 5829

1 detection rules reference this event. View event page.

Sigma (1)

Vulnerable Netlogon Secure Channel Connection Allowed severity high T1548