Forum Discussion
Low information alert, Remote code execution attempt
Greetings, I have a customer that is running Defender for Identity and this alert keeps showing up in their Azure Sentinel instance. I thought it might have been a problem with information being los...
EliOfek
Microsoft
MicrosoftProbably not much more, you can export the alert to excel and see some more details, but not sure they will give you the answer you are after.
This alert my vary on how detailed it is depending on which protocol was used to do the remote execution, and how the environment is configured. some protocols are encrypted, so we can only tell the execution took place, but not much more.
This alert my vary on how detailed it is depending on which protocol was used to do the remote execution, and how the environment is configured. some protocols are encrypted, so we can only tell the execution took place, but not much more.