Uncommon Connection to Active Directory Web Services — Detection Rule
Detects uncommon network connections to the Active Directory Web Services (ADWS) from processes not typically associated with ADWS management.
Detects uncommon network connections to the Active Directory Web Services (ADWS) from processes not typically associated with ADWS management.