LoFP LoFP / T1485.001

T1485.001

TitleTags
while this search has no known false positives, it is possible that it is a legitimate admin activity. please consider filtering out these noisy events using useragent, user_arn field names.