Potential Access Token Abuse

심각도 보통 Sigma 탐지 룰. Detects potential token impersonation and theft. Example, when using "DuplicateToken(Ex)" and "ImpersonateLoggedOnUser" with the "LOGON32_LO…

작성자: Michaela Adams, Zach Mathis · 원본 라이선스: DRL 1.1 · SigmaHQ 원본