exchange | Detection.FYI

New Federated Domain Added - Exchange

Nov 10, 2026 · attack.persistence attack.t1136.003 ·
Share on:

Detects the addition of a new Federated Domain.

Read More

Recent Posts

Kerberoasting Activity - Initial Query
Browser Started with Remote Debugging
ISATAP Router Address Was Set
Pingback Backdoor Activity
Pingback Backdoor DLL Loading Activity
Pingback Backdoor File Indicators
Potentially Suspicious Malware Callback Communication - Linux
Suspicious RazerInstaller Explorer Subprocess

Language

SIGMA 4132 ELASTIC 2348 MQL 1393

Tags

RESOURCES-INVESTIGATION-GUIDE 2272 USE-CASE-THREAT-DETECTION 1840 PERFORMANCE-NORMAL 1377 DOMAIN-ENDPOINT 1318 ATTACK.EXECUTION 1113 ATTACK.STEALTH 1043 DATA-SOURCE-ELASTIC-DEFEND 1042 RULE-TYPE-EVENT-CORRELATION-EQL 982 ATTACK.PERSISTENCE 873 ATTACK.PRIVILEGE-ESCALATION 746 DOMAIN-CLOUD 731 NOISE-LOW 729 OS-WINDOWS 610 PLATFORM-WINDOWS 602