Very helpful resource. To be comprehensive it would be good to add the Win10 ASR rules which also disable access to LSA. Also I think it’s worth calling out that Win Credential Guard was once effective but has since been obsolete as of September 2018 with new Mimikatz release.
Preventing Mimikatz Attackshttps://medium.com/blue-team/preventing-mimikatz-attacks-ed283e7ebdd5 …
-
-
- Još 3 druga odgovora
Novi razgovor -
-
-
THANK YOU!!!
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.