Ad slot: top

SPL

Escalation of Privileges in a Windows Environment by User

Description

Submitted by Go Splunk

Escalation of Privileges in a Windows Environment by user.
8 4
sourcetype="WinEventLog:Security" (EventCode=576 OR EventCode=4672 OR EventCode=577 OR EventCode=4673 OR EventCode=578 OR EventCode=4674) | stats count by user

Comments

0 total

Be the first to comment on this SPL.

Leave a comment

You must log in to post a comment.

Ad slot: bottom