Vulnerable Netlogon Secure Channel Connection Allowed — Detection Rule

Detects that a vulnerable Netlogon secure channel connection was allowed, which could be an indicator of CVE-2020-1472.

Read the full analysis on IntelFusions