BeyondTrust Administrators Group Modified

Lucas Pinho@lucaslapinho

•updated Aug 17, 2026•0•0•2

Detects modifications to BeyondTrust Password Safe administrative groups. This activity is critical to monitor as it can indicate an unauthorized attempt to alter privileged access models or maintain persistence by modifying identity permissions within the BeyondTrust environment.