Skip to main content

Threat Manager Folder Templates

The Threat Manager folder contains the following templates:

TemplateDescriptionTAGS
Threat Manager for ADThis is the recommended policy for sending AD Events captured by Threat Prevention to Threat Manager. This policy includes: Authentication Monitoring, Active Directory Changes, AD Replication Monitoring, and LSASS Guardian - Monitor.
  • Threat Manager
  • NEW v6.1 TEMPLATES
Threat Manager for AD LDAPThis is the recommended policy for sending LDAP events captured by Threat Prevention to Threat Manager for detecting signature queries of LDAP reconnaissance tools.
Policy 1: Suspicious Queries
Policy 2: Suspicious Attributes Returned
  • Threat Manager
  • NEW v7.1 TEMPLATES