LoFP
/
domain server
Title
Tags
if the identity_management data model is not updated regularly, this search could give you false positive alerts. please consider this and investigate appropriately.
t1078.002
domain server
splunk