Password Policy Discovery With Get-AdDefaultDomainPasswordPolicy — Detection Rule

Detetcts PowerShell activity in which Get-Addefaultdomainpasswordpolicy is used to get the default password policy for an Active Directory domain.

Read the full analysis on IntelFusions