A New Trust Was Created To A Domain

Title: A New Trust Was Created To A Domain
Status: stable
Description:Addition of domains is seldom and should be verified for legitimacy.
References:
  -https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-10/security/threat-protection/auditing/event-4706
Author: Thomas Patzke
Date: 2019-12-03
modified:2024-01-16
Tags:

• -'attack.privilege-escalation'
• -'attack.persistence'
• -'attack.t1098'

Logsource:

• product: windows
• service: security

Detection:
  selection:
    EventID: '4706'
  condition:selection
Falsepositives:
  -Legitimate extension of domain structure
Level: medium