CmdID

CmdID / Techniques

T1615 Group Policy Discovery

Adversaries may gather information on Group Policy settings to identify paths for privilege escalation, security measures applied within a domain, and to discover patterns in domain objects that can be manipulated or used to blend in the environment. MITRE ATT&CK

4 Sigma rules T1615 on attack.mitre.org

Sigma rules tagged with it

process creation, the highest levels first
criticalHackTool - SharpUp PrivEsc Tool ExecutionFlorian Roth (Nextron Systems) · Windows
highSuspicious Reconnaissance Activity Via GatherNetworkInfo.VBSNasreddine Bencherchali (Nextron Systems) · Windows