Detection rules › By eventMicrosoft-Windows-Security-Auditing event 46921 detection rule reference this event. View event page.Sigma (1)DPAPI Domain Master Key Backup Attempt severity medium T1003.004