Forum Discussion
Security principal reconnaissance (LDAP) (external ID 2038)
If downloading the details for this type of alert, shouldn't there be a list ofsuspected users attached within the download?
Or Tsemah
We had a new alert come through and the download details did not contain any list of actors.
The tabs in the download are Summary, Source Computer, Domain Controllers, Event Activities and Related Entities.
Hey Ed, can you please open a support ticket and forward it to me (ort@microsoft.com) so we can investigate it?