SharpHound Recon Account Discovery — Detection Rule

Detects remote RPC calls useb by SharpHound to map remote connections and local group membership.

Read the full analysis on IntelFusions