attack.t1562.010 | Detection.FYI

LSA PPL Protection Disabled Via Reg.EXE
Mar 26, 2023 · attack.defense_evasion attack.t1562.010 ·
Share on:
Detects the usage of the "reg.exe" utility to disable PPL protection on the LSA process

Read More