ADSentinel is a read-only Active Directory security assessment tool that runs 167 security checks across 16 categories, covering 37 MITRE ATT&CK techniques (86% of all AD-primary TTPs). It connects ...
description: The following analytic identifies modifications to registry keys commonly used for persistence mechanisms. It leverages data from endpoint detection sources like Sysmon or Carbon Black, ...