esent | Detection.FYI

Dump Ntds.dit To Suspicious Location

Aug 12, 2024 · attack.execution ·
Share on:

Detects potential abuse of ntdsutil to dump ntds.dit database to a suspicious location

Read More
Ntdsutil Abuse

Aug 12, 2024 · attack.credential-access attack.t1003.003 ·
Share on:

Detects potential abuse of ntdsutil to dump ntds.dit database

Read More