Skip to content
Threat Feed
Subscribe

Tag

Security-Auditing

1 brief RSS
medium advisory

Detection of Suspicious Explicit Credential Local Logon

Detection logic for monitoring Windows Event ID 4648 to identify potential privilege escalation through unauthorized explicit credential usage.

windows security-auditing privilege-escalation
1r 1t