microsoft_windows_distributed_com | Detection.FYI

Local Privilege Escalation Indicator TabTip

May 20, 2025 · attack.execution attack.credential-access attack.t1557.001 ·
Share on:

Detects the invocation of TabTip via CLSID as seen when JuicyPotatoNG is used on a system in brute force mode

Read More