event-logs

1 talk tagged with this topic.

Filters+

Loading filters…

1–1 of 1 talk · loading…

Sort

Main Stage·40 min

DEF CON
Blue Team
Date: Aug 2015
Location: Las Vegas

Forensic Artifacts from a Pass the Hash Attack

Gerard Laygui

Gerard Laygui maps specific Windows event log footprints and memory artifacts left behind when adversaries execute Pass-the-Hash attacks across a network.

pass-the-hashwindows-forensicsevent-logs+2