t1484.001 | LoFP

t1484.001

Title	Tags
legitimate execution by system administrators.	t1484 t1484.001 t1547 windows sigma
legitimate modifications to default domain or default domain controllers gpos	t1484 t1484.001 windows sigma
legitimate use	t1005 t1040 t1072 t1090 t1124 t1127 t1219 t1219.002 t1484 t1484.001 t1546 t1546.015 t1555 t1555.003 t1685 windows sigma
legitimate use of gpme to modify gpos	t1484 t1484.001 windows sigma
users allowed to perform these modifications (user found in field subjectusername)	t1484 t1484.001 windows sigma