DT118
OCI Unauthorized System or Service Modification - DT118
Contributor: The ITM Team @ - Detection DT118
DT119
SystemPropertiesRemote.exe Execution - DT119
Contributor: The ITM Team @ - Detection DT119
DT120
Modification of RDP Registry Keys - DT120
Contributor: The ITM Team @ - Detection DT120
DT121
RDP Group Membership Changes - DT121
Contributor: The ITM Team @ - Detection DT121
DT122
DNS and HTTPS Traffic to Web-Based Remote Access Platforms - DT122
Contributor: The ITM Team @ - Detection DT122
DT123
Access to /mnt/c/ from Within WSL - DT123
Contributor: The ITM Team @ - Detection DT123
DT124
Installation of New WSL Distributions - DT124
Contributor: The ITM Team @ - Detection DT124
DT126
Registry Value Audit, Start_TrackProgs - DT126
Contributor: The ITM Team @ - Detection DT126
DT127
Absence of Expected Entries in RunMRU and UserAssist - DT127
Contributor: The ITM Team @ - Detection DT127
DT128
Microsoft Purview eDiscovery - DT128
Contributor: The ITM Team @ - Detection DT128