Detections
Analytics
Group Policy Discovery
Description
Adversaries may gather information on Group Policy settings to identify paths for privilege escalation, security measures applied within a domain, and to discover patterns in domain objects that can be manipulated or used to blend in the environment. Group Policy allows for centralized management of user and computer settings in Active Directory (AD). Group policy objects (GPOs) are containers for group policy settings made up of files stored within a predictable network path \\SYSVOL\\Policies\.[
Products, Sensors, and Dependencies
| Product | Dependencies | Data source | Access required | Protocol | Data Collected | Notes |
|---|
Attack Path Technique Details
Framework: MITRE ATT&CK
Family: Discovery
Technique: Group Policy Discovery
Products Required: Tenable Identity Exposure