TLDR InfoSec · LAUNCHES & TOOLS
ACTIVE DIRECTORY CANARIES
Summary from the TLDR InfoSec newsletter
Active Directory Canaries is a detection primitive for AD enumeration techniques using the Directory Service Object Access: Failure audit event. This repository contains Powershell scripts that deploy the canaries.