SCM Database Privileged Operation — Detection Rule

Detects non-system users performing privileged operation os the SCM database

Read the full analysis on IntelFusions