I would like to alert if any thing or anyone attempts Null Session Enumeration against Active Directory.
This is two fold since I want to know if it is being done and want to stop it if possible. Alerting on it would be great as well.
I have been looking for something in the logs to key into but have not found it yet.
RT