FortiSIEM User-privileges alerts
Using FortiSIEM monitoring tool. I'm looking to get alerts when a user tries to escalate their privileges.
Trouble is I'm not sure of the event name/type which would show this event. I have tried filtering through RAW event log, but I still can't seem to find the correct alert.
Any help appreciated.