T1615 Group Policy Discovery
Adversaries may gather information on Group Policy settings to identify paths for privilege escalation, security measures applied within a domain, and to discover patterns in domain objects that can be manipulated or used to blend in the environment. MITRE ATT&CK
4 Sigma rules T1615 on attack.mitre.org
Sigma rules tagged with it
highSuspicious Reconnaissance Activity Via GatherNetworkInfo.VBSNasreddine Bencherchali (Nextron Systems) · Windows