Sensitive File Recovery From Backup Via Wbadmin.EXE

심각도 높음 Sigma 탐지 룰. Detects the dump of highly sensitive files such as "NTDS.DIT" and "SECURITY" hive. Attackers can leverage the "wbadmin" utility in order to …

작성자: Nasreddine Bencherchali (Nextron Systems), frack113 · 원본 라이선스: DRL 1.1 · SigmaHQ 원본