Outgoing Logon with New Credentials — Detection Rule

Detects logon events that specify new credentials

Read the full analysis on IntelFusions