Skip to main content

Use CasesGet Started with Threat Detection, Investigation, and Response (TDIR) Use Case Categories

Abnormal Directory Services Activity Scenario

Learn about the Account Manipulation Abnormal Directory Services Activity scenario.

The Abnormal Directory Services Activity scenario describes when an attacker manipulates Active Directory (AD) data to maintain access to victim systems.

In the Threat Detection, Investigation, and Response (TDIR) Use Case Categories hierarchy, the Abnormal Directory Services Activity scenario falls under the Account Manipulation use case.