attack.t1562.010 | Detection.FYI

LSA PPL Protection Disabled Via Reg.EXE

Aug 12, 2024 · attack.defense-evasion attack.t1562.010 ·
Share on:

Detects the usage of the "reg.exe" utility to disable PPL protection on the LSA process

Read More