CQL Hubby ByteRay
← All queries

Account Password Not Required Changed (UAC Bypass) – Microsoft Defender for Identity

CQL · Falcon Next-Gen SIEMCopy query
Loading query…
account_password_not_required_changed_uac_bypass_microsoft_defender_for_identity.yml
Detection
Identity
Identity

Want this running in your SIEM — with someone on call?

Our Managed SIEM team operates CrowdStrike Falcon Next-Gen SIEM in production, with over 350 battle-tested use cases and 24/7 incident response behind them.

Talk to the SIEM team