Detection rules › By eventMicrosoft-Windows-LDAP-Client event 301 detection rule reference this event. View event page.Sigma (1)Potential Active Directory Reconnaissance/Enumeration Via LDAP severity medium T1069.002, T1087.002, T1482