Nioubi24

Hi, Two days ago, same behavior : the admin account LastLogonDate 03/15 (US format) is the exact Timestamp of a 4769 "Kerberos ticket Operations" event concerning a MSA account. Any...

Hi, Thanks for having taken into account this false positive (Cf your post on Twitter [https://twitter.com/mysmartlogon/status/1539575176362426368?cxt=HHwWgIC8wejd1d0qAAAA](url) ) The "S4u2Self" was also mentionned by another source - in march - as...

Hi, I've got the same issue on this rule : the account (S-1-5-21-***-501) is disabled : userAccountControl = 546 NORMAL_ACCOUNT+PASSWD_NOTREQD+ACCOUNTDISABLE , but the rule triggers... ? Regards