avatar

Jan Mulder

@Wolkenman
0 followers5 downloads17 copies0 likes132 views

16 detections

Detects and summarizes the encryption status and methods used for the Windows C: drive using the EncryptableVolume table.
avatar
Jan Mulder@Wolkenman
HuntingSpace
13 days ago
002
Detects the removal of user accounts from a specific sensitive Microsoft Entra ID group, which may indicate unauthorized group membership changes or potential privilege escalation activities.
avatar
Jan Mulder@Wolkenman
HuntingSpace
17 days ago
105
Summarizes the installed hotfixes and QFE descriptions across Windows devices to provide an overview of patch levels.
avatar
Jan Mulder@Wolkenman
HuntingSpace
13 days ago
001
Summarizes and counts devices based on their system enclosure model and SKU.
avatar
Jan Mulder@Wolkenman
HuntingSpace
13 days ago
001
This rule queries CPU inventory data and summarizes the number of devices by manufacturer and model.
avatar
Jan Mulder@Wolkenman
HuntingSpace
13 days ago
001
Summarizes the total physical memory in gigabytes across reporting devices to assist with hardware inventory and capacity planning.
avatar
Jan Mulder@Wolkenman
HuntingSpace
13 days ago
001
Page 2 of 2