Unauthorized System Time Modification — Detection Rule

Detect scenarios where a potentially unauthorized application or user is modifying the system time.

Read the full analysis on IntelFusions