domains / families / security / performing-active-directory-compromise-investigation

performing-active-directory-compromise-investigation

separate

Investigate Active Directory compromise by analyzing authentication logs,

When to use

• When conducting security assessments that involve performing active directory compromise investigation
• When following incident response procedures for related security events
• When performing scheduled security testing or auditing activities
• When validating security controls through hands-on testing

Skill page

Source