Active Directory Structure Export Via Csvde.EXE — Detection Rule

Detects the execution of "csvde.exe" in order to export organizational Active Directory structure.

Read the full analysis on IntelFusions