LoFP / t1589.002

t1589.002

Title	Tags
legitimate use of the library for administrative activity	t1018 t1558 t1589 t1589.002 windows sigma
possible false positive scenarios include but are not limited to vulnerability scanners and missconfigured systems.	t1589.002 endpoint splunk