stp.4u | Detection.FYI

Potential Access Token Abuse

Aug 12, 2024 · attack.defense-evasion attack.privilege-escalation attack.t1134.001 stp.4u ·
Share on:

Detects potential token impersonation and theft. Example, when using "DuplicateToken(Ex)" and "ImpersonateLoggedOnUser" with the "LOGON32_LOGON_NEW_CREDENTIALS flag".

Read More