DT093
MFT and Shimcache Executable Timestamp Comparison - DT093
Contributor: The ITM Team @ - Detection DT093
DT094
Microsoft Unified Audit Log - DT094
Contributor: The ITM Team @ - Detection DT094
DT103
Photographic Identification Comparison - DT103
Contributor: The ITM Team @ - Detection DT103
DT104
Leaver Watchlist - DT104
Contributor: The ITM Team @ - Detection DT104
DT105
vssadmin Shadow Copy Deletion - DT105
Contributor: The ITM Team @ - Detection DT105
DT107
Microsoft Teams Admin Center Meeting and Call History - DT107
Contributor: The ITM Team @ - Detection DT107
DT109
Windows Event Log, System Time Modification - DT109
Contributor: The ITM Team @ - Detection DT109
DT110
MIP Label Activity Monitoring - DT110
Contributor: The ITM Team @ - Detection DT110
DT112
Asset Discovery Audit - DT112
Contributor: The ITM Team @ - Detection DT112
DT113
Tracking Patterns of Policy Violations - DT113
Contributor: The ITM Team @ - Detection DT113