Hi,

Is there a way to exclude the msol_user account from being reported in the DCSync attack events? As I understand it, the msol account is designed for this?