Add more Mimikatz detection, focusing on token::elevate as a non-admin user

Browse Source

...

This commit is contained in:

Joshua Wright

2019-05-03 06:33:20 -04:00

parent f17d32491e

commit 9a293b974e

2 changed files with 21 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

BIN

evtx/mimikatz-privilegedebug-tokenelevate-hashdump.evtx Executable file

Binary file not shown.