User Couldn't Call a Privileged Service 'LsaRegisterLogonProcess'

심각도 높음 Sigma 탐지 룰. The 'LsaRegisterLogonProcess' function verifies that the application making the function call is a logon process by checking that it has the…

작성자: Roberto Rodriguez (source), Ilyas Ochkov (rule), oscd.community · 원본 라이선스: DRL 1.1 · SigmaHQ 원본