HackTool - SOAPHound Execution

SigmaHQ Detections@sigmaHQ

•updated Sep 3, 2026•3•0•2

Detects the execution of SOAPHound, a .NET tool for collecting Active Directory data, using specific command-line arguments that may indicate an attempt to extract sensitive AD information.