DPAPI Domain Master Key Backup Attempt
Detects attempts to back up the Data Protection Application Programming Interface (DPAPI) Domain Master Key. This event is generated at the source machine, not the Domain Controller, indicating a potential attempt to gain access to encrypted data.
Sigma
