David Longenecker · @dnlongen
111 followers · 42 posts · Server infosec.exchange

Most of us in this field are aware that some types of administrative tools and administrative logons leave behind credentials in a manner that can be reused by an actor on a compromised host, and some do not. I've been looking for a and cheat sheet for a while - @reprise_99 brought this one to my attention. Nice! learn.microsoft.com/en-us/wind

#sysadmin #IncidentResponder #dfir #toolbox

Last updated 2 years ago

David Longenecker · @dnlongen
91 followers · 34 posts · Server infosec.exchange

Most of us in this field are aware that some types of administrative tools and administrative logon leave behind credentials in a manner that can be reused by an actor of the host, and some do not. I've been looking for a and cheat sheet for a while - @reprise_99 brought this one to my attention. Nice! learn.microsoft.com/en-us/wind

#sysadmin #IncidentResponder #dfir #toolbox

Last updated 2 years ago

Evodefense · @evodefense
33 followers · 17 posts · Server infosec.exchange
Tarnkappe.info · @tarnkappeinfo
1529 followers · 3787 posts · Server social.tchncs.de