Tool
Get-LDAPPingDetection.ps1
- First Reported
- Jun 24, 2026
- Latest Reported
- Jun 24, 2026
Reported Context (1)
- Figure 7: Get-LDAPPingDetection.ps1 output during a SOPRANOS lab ldapnomnom run. The script correlates netlogon.log usernames with Event 5156 source IPs in a five-second window, then escalates on honeytoken hits, burst Detecting Active Directory LDAP Ping: Correlating Netlogon Logs and Event 5156
People (2)
MITRE ATT&CK (1)
Vendors (1)
Products (2)
Tools (3)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.