LoFP
/
account
account rule
Title
Tags
as is common with many fraud-related searches, we are usually looking to attribute risk or synthesize relevant context with loosely written detections that simply detect anamoluous behavior.
account
splunk
domain controllers, authentication chokepoints, and vulnerability scanners.
t1110
T1110.003
account
splunk