Blog Labs References

Detection rules › By event

Microsoft-Windows-Security-Auditing event 4627

1 detection rule reference this event. View event page.

Splunk (1)

Windows Domain Admin Impersonation Indicator T1558

Keyboard Shortcuts

j / k: Scroll down / up
d / u: Half-page down / up
h / l: Go back / forward
gg: Go to top
G: Go to bottom
f: Follow link (SHIFT = new tab)
/: Focus search
?: Toggle this help

See Navigation Reference for search modifiers and filters.