Audit Policy Tampering Via NT Resource Kit Auditpol

심각도 높음 Sigma 탐지 룰. Threat actors can use an older version of the auditpol binary available inside the NT resource kit to change audit policy configuration to i…

작성자: Nasreddine Bencherchali (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본