Analytics BIOC Informational
✕

Sensitive account password reset attempt

An attempt was made to reset a sensitive account's password.

Module:
Identity Analytics
Data source:
Windows Event Collector, XDR Agent with eXtended Threat Hunting (XTH)
ATT&CK tactics: Impact (TA0040)
ATT&CK techniques: Account Access Removal (T1531)
Attacker's goals:

An attacker may attempt to gain access to the account.

Investigative actions:

Verify this action with the user who performed the change.

Test period:
N/A (single event)
Deduplication:
1 Day
1 variation:
  • Sensitive account password reset attempt for the first time Low (parent: Informational)