AdFind AD discovery queries launched by adf.bat batch from cmd.exe

ills3c Intel&Coffee@Ills3C

•updated yesterday•1•0•1

Detects the execution of the AdFind utility launched from a command interpreter batch file script (cmd.exe wrapping a .bat or .cmd script) performing multiple Active Directory reconnaissance queries, such as enumeration of persons, computers, organizational units, groups, trusts, or subnets.