Detect Computer Changed with Anonymous Account

Exploitation of Remote Services

Create or delete windows shares using net exe

Indicator Removal, Network Share Connection Removal

Detect Zerologon via Zeek

Exploit Public-Facing Application

Cloud Compute Instance Created With Previously Unseen Instance Type

Cloud Network Access Control List Deleted