Skip to content
Navigation menu
Search
Powered by Algolia
Search
Log in
Create account
DEV Community
Close
#
sysmon
Follow
Hide
Posts
Left menu
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
Right menu
Windows persistence collapses to a few places: audit first, then diff
tktkkame
tktkkame
tktkkame
Follow
Nov 6
Windows persistence collapses to a few places: audit first, then diff
#
security
#
windows
#
sysmon
#
incidentresponse
Comments
Add Comment
2 min read
Moderation
Opening a Word file got lsass read. Remember 0x1410.
tktkkame
tktkkame
tktkkame
Follow
Oct 26
Opening a Word file got lsass read. Remember 0x1410.
#
security
#
windows
#
sysmon
#
incidentresponse
Comments
Add Comment
2 min read
Moderation
đź‘‹
Sign in
for the ability to sort posts by
relevant
,
latest
, or
top
.
We're a place where coders share, stay up-to-date and grow their careers.
Log in
Create account
