Whoami executed by sql service account

H

HHAR

Hi,


Our security monitoring tool has detected "whoami /priv" being executed by sql service account on windows server 2016, DB server.

No indication of compromise seen on the server.

Is this service account expected to run such command?

Thank you.

Continue reading...
 
Back
Top Bottom