From 7d413ffbda58c81347694c6e25f08cf59d572edc Mon Sep 17 00:00:00 2001 From: Eric Conrad Date: Fri, 3 May 2019 10:08:51 -0300 Subject: [PATCH] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index a821e87..3f2638c 100644 --- a/README.md +++ b/README.md @@ -110,7 +110,7 @@ See 'Logging setup' section below for how to configure these logs |Metasploit native target (system)|`.\DeepBlue.ps1 .\evtx\metasploit-psexec-native-target-system.evtx`| |Metasploit PowerShell target (security)|` .\DeepBlue.ps1 .\evtx\metasploit-psexec-native-target-security.evtx`| |Metasploit PowerShell target (system)|` .\DeepBlue.ps1 .\evtx\metasploit-psexec-native-target-system.evtx`| -|Mimikatz hashdump|`.\DeepBlue.ps1 .\evtx\mimikatz-privesc-hashdump.evtx`| +|Mimikatz lsadump::sam|`.\DeepBlue.ps1 .\evtx\mimikatz-privesc-hashdump.evtx`| |Mimiktaz token::elevate|`.\DeepBlue.ps1 .\evtx\mimikatz-privilegedebug-tokenelevate-hashdump.evtx`| |New user creation|`.\DeepBlue.ps1 .\evtx\new-user-security.evtx`| |Obfuscation (encoding)|`.\DeepBlue.ps1 .\evtx\Powershell-Invoke-Obfuscation-string-menu.evtx\`|