AddThis
Showing posts with label
Incident Response
.
Show all posts
Showing posts with label
Incident Response
.
Show all posts
Tuesday, March 14, 2017
Detecting an Attacker Dumping Passwords from the Windows Registry
›
Several tools are available to dump password hashes from the Windows registry such as Mimikatz and gsecdump. Attackers commonly dump domain ...
Sunday, September 11, 2016
Detecting Lateral Movement Using Sysmon and Splunk
›
Detecting an attacker moving laterally in your environment can be tough. It can be difficult to obtain the necessary logs to identify this a...
›
Home
View web version