Skip to main content

Netlogon protocol

Summary​

This role can be used to create an audit dataview for the Domain Controllers for Netlogon's RequireSeal registry key.

The registry key's value will be stored in the Serial Number column.

Settings​

Detection StringComparatorResultApplicable OS
{%-HKLM/SYSTEM/CurrentControlSet/Services/Netlogon/Parameters:RequireSeal-%}ExistsWindows

Changelog​

2025-04-10​

  • Initial version of the document