Tag
medium
advisory
Detection of SharpHound Active Directory Enumeration Tool
1 rule 3 TTPsSharpHound is a widely used tool for Active Directory enumeration, enabling attackers to perform reconnaissance, map network relationships, and identify paths for lateral movement and privilege escalation.
reconnaissance
discovery
active-directory
windows
tool-usage
1r
3t
high
advisory
Detection of SOAPHound Active Directory Collection Tool
1 rule 1 TTPDetection of the .NET-based SOAPHound utility used for unauthorized extraction of Active Directory data via Active Directory Web Services.
discovery
active-directory
tool-usage
1r
1t