Skip to content

Hide Navigation Hide TOC

Password Policy Discovery With Get-AdDefaultDomainPasswordPolicy (bbb9495b-58fc-4016-b9df-9a3a1b67ca82)

Detetcts PowerShell activity in which Get-Addefaultdomainpasswordpolicy is used to get the default password policy for an Active Directory domain.

Cluster A Galaxy A Cluster B Galaxy B Level
Password Policy Discovery With Get-AdDefaultDomainPasswordPolicy (bbb9495b-58fc-4016-b9df-9a3a1b67ca82) Sigma-Rules Password Policy Discovery - T1201 (b6075259-dba3-44e9-87c7-e954f37ec0d5) Attack Pattern 1