[Emerging-Sigs] DCSYNC rule

James Lay jlay at slave-tothe-box.net
Fri Feb 28 05:36:06 HST 2020


Anyone know if this was updated?

https://blog.didierstevens.com/2017/10/08/quickpost-mimikatz-dcsync-detection/

IN a recent engagement I did not see this hit.  Thank you!

James


More information about the Emerging-sigs mailing list