Blog Labs References

Detection rules › By event

Microsoft-Windows-Security-Auditing event 4876

1 detection rule reference this event. View event page.

Splunk (1)

Windows Steal Authentication Certificates CS Backup T1649

Keyboard Shortcuts

j / k: Scroll down / up
d / u: Half-page down / up
h / l: Go back / forward
gg: Go to top
G: Go to bottom
f: Follow link (SHIFT = new tab)
/: Focus search
?: Toggle this help

See Navigation Reference for search modifiers and filters.