Forum

Ultimate Windows Security Forum » Windows Security Settings » Auditing of lsass.exe

Auditing of lsass.exe Expand / Collapse
Rate Topic
Display Mode
Topic Options
Author
Message
somar
Posted 11/10/2015 2:54:35 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 10/3/2016 1:19:59 PM
Posts: 6, Visits: 8
I have seen demos of some tools that can indicate access to lsass.exe. Does anybody have any experience with this?
Specifically, I have seen a tool that can identify mimikatz has accessed lsass.exe. I am currently trying to see if I can identify this behavior in the native Windows logs.
Post #5149
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 9:03am