|
|
|
Forum Newbie
Group: Forum Members
Last Login: 10/3/2016 1:19:59 PM
Posts: 6,
Visits: 8
|
|
I have seen demos of some tools that can indicate access to lsass.exe. Does anybody have any experience with this?
Specifically, I have seen a tool that can identify mimikatz has accessed lsass.exe. I am currently trying to see if I can identify this behavior in the native Windows logs.
|
|
|
|