snort rules to track Potential Criticality windows event

[Arun Saini <mailarunsaini () gmail com>]

Hi Team,

do we have any snort rules to track alerts on Potential Criticality windows
event ?? like given below ,

https://technet.microsoft.com/windows-server-docs/identity/ad-ds/plan/appendix-l--events-to-monitor


​Also to track events or compromise like attached white paper ?​

​
http://www.thinkmind.org/index.php?view=article&articleid=icimp_2016_2_20_30032
 ​



[image: --]
Arun Saini
[image: http://]about.me/arun.saini
<http://about.me/arun.saini>

*Mobile: +91-9890738762*

*in.linkedin.com/in/mailarunsaini <http://in.linkedin.com/in/mailarunsaini>*

Attachment: icimp_2016_2_20_30032.pdf
Description:

------------------------------------------------------------------------------

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://sourceforge.net/mailarchive/forum.php?forum_name=snort-users

Please visit http://blog.snort.org to stay current on all the latest Snort news!