Event code :4649 A replay attack was detected... Expand / Collapse
Author
Message
Posted 8/12/2015 1:52:36 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 8/12/2015 1:28:15 PM
Posts: 1, Visits: 0
"A replay attack was detected. Subject: Security ID: S-1-5-18 Account Name: acct_name$ Account Domain: Domain_name Logon ID: 0x3E7 Credentials Which Were Replayed: Account Name: acct_name$ Account Domain: domain_name Process Information: Process ID: 0x9ba028d970 Process Name: C:\Windows\System32\dns.exe Network Information: Workstation Name: - Detailed Authentication Information: Request Type: KRB_AP_REQ Logon Process: Kerberos Authentication Package: Kerberos Transited Services: - This event indicates that a Kerberos replay attack was detected- a request was received twice with identical information. This condition could be caused by network misconfiguration."
Post #4671
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 4:08am