adding analytic story

splunk · Oct 9, 2023 · 3e07515 · 3e07515
1 parent 0285913
commit 3e07515
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/detections/endpoint/windows_domain_admin_impersonation_indicator.yml b/detections/endpoint/windows_domain_admin_impersonation_indicator.yml
@@ -23,6 +23,7 @@ references:
 tags:
   analytic_story:
   - Active Directory Kerberos Attacks
+  - Active Directory Privilege Escalation
   asset_type: Endpoint
   confidence: 100
   impact: 80