Microsoft Defender for Identity reconnaissance phase
https://docs.microsoft.com/en-us/defender-for-identity/reconnaissance-alerts
Previous name:Reconnaissance using account enumeration Description In account enumeration reconnaissance, an attacker uses a dictionary with thousands of user names, or tools such as KrbGuess in an attempt to guess user names in the domain. Kerberos: Attacker makes Kerberos requests using these names to try to find a valid username in the domain. When a guess successfully determines a username, the attacker gets the Preauthentication required instead o…
Previous name:Reconnaissance using account enumeration Description In account enumeration reconnaissance, an attacker uses a dictionary with thousands of user names, or tools such as KrbGuess in an attempt to guess user names in the domain. Kerberos: Attacker makes Kerberos requests using these names to try to find a valid username in the domain. When a guess successfully determines a username, the attacker gets the Preauthentication required instead o…
DA: 15 PA: 47 MOZ Rank: 88