Potential Unconstrained Delegation Discovery Via Get-ADComputer - ScriptBlock — Detection Rule

Detects the use of the "Get-ADComputer" cmdlet in order to identify systems which are configured for unconstrained delegation.

Read the full analysis on IntelFusions