RA2604: Find Compromised User
Summary
| ID | RA2604 |
|---|---|
| Brief Description | Find compromised user |
| Author | @ERMACK_COMMUNITY |
| Creation Date | 2023/05/07 |
| Response Stage | Identification |
| Response Actions Implementations |
Description
Find user with suspicious activity. Check it on logs or on network traffic