Detects the modification of Group Policy Objects (GPO) to add a startup/logon script to users or computer objects.

Read More

Detects the first occurrence of a modification to Group Policy Object Attributes to add privileges to user accounts or use them to add users as local admins.

Read More

Detect malicious GPO modifications can be used to implement many other malicious behaviors.

Read More

Detect malicious GPO modifications can be used to implement many other malicious behaviors.

Read More