Disable Metasploit psexec detect due to false-positive conflict with MS Exchange; revise alert for _Multiple admin logons for one account_ to show attempt count instead of unique event IDs

Browse Source

...

This commit is contained in:

Joshua Wright

2019-05-06 14:34:31 -04:00

parent 1708e03fc3

commit 612cde1cf3

2 changed files with 19 additions and 18 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

BIN

evtx/metasploit-psexec-pwshpayload.evtx Executable file

Binary file not shown.