https://community.checkpoint.com/t5/General-Topics/under-attack/m-p/202873#M33759 <P>Good evening;</P><P>while browsing the OU organization of my service's active directory withe harmony Endpoint, i notice the existence of an OU with user objects (test test, robot and AdminOP group)</P><P>that i didn't create. Moreover, this OU isn't visible in the AD and neither are the objects it contains.</P><P>am i being Hacked ???</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="bizarre1.png" style="width: 414px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/24050iAFA6EA54ECB1E31B/image-size/large?v=v2&amp;px=999" role="button" title="bizarre1.png" alt="bizarre1.png" /></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="bizarre.png" style="width: 999px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/24051i221D7661957165F5/image-size/large?v=v2&amp;px=999" role="button" title="bizarre.png" alt="bizarre.png" /></span></P> Thu, 11 Jan 2024 21:44:36 GMT Junior 2024-01-11T21:44:36Z https://community.checkpoint.com/t5/General-Topics/under-attack/m-p/202873#M33759 <P>Good evening;</P><P>while browsing the OU organization of my service's active directory withe harmony Endpoint, i notice the existence of an OU with user objects (test test, robot and AdminOP group)</P><P>that i didn't create. Moreover, this OU isn't visible in the AD and neither are the objects it contains.</P><P>am i being Hacked ???</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="bizarre1.png" style="width: 414px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/24050iAFA6EA54ECB1E31B/image-size/large?v=v2&amp;px=999" role="button" title="bizarre1.png" alt="bizarre1.png" /></span><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="bizarre.png" style="width: 999px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/24051i221D7661957165F5/image-size/large?v=v2&amp;px=999" role="button" title="bizarre.png" alt="bizarre.png" /></span></P> Thu, 11 Jan 2024 21:44:36 GMT https://community.checkpoint.com/t5/General-Topics/under-attack/m-p/202873#M33759 Junior 2024-01-11T21:44:36Z https://community.checkpoint.com/t5/General-Topics/under-attack/m-p/202948#M33781 <P>I think you should probably investigate this with TAC via remote sesison.</P> <P>Best,</P> <P>Andy</P> Fri, 12 Jan 2024 18:23:32 GMT https://community.checkpoint.com/t5/General-Topics/under-attack/m-p/202948#M33781 the_rock 2024-01-12T18:23:32Z