Auditing of lsass.exe Expand / Collapse
Author
Message
Posted 11/10/2015 2:54:35 PM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 10/3/2016 1:19:59 PM
Posts: 6, Visits: 8
I have seen demos of some tools that can indicate access to lsass.exe. Does anybody have any experience with this?
Specifically, I have seen a tool that can identify mimikatz has accessed lsass.exe. I am currently trying to see if I can identify this behavior in the native Windows logs.
Post #5149
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 9:03am