Windows Post Exploitation Risk Behavior
Query Registry, System Network Connections Discovery, Permission Groups Discovery, System Network Configuration Discovery, OS Credential Dumping, System Info...
Recent Posts
Domain Group Discovery With Net
Permission Groups Discovery, Domain Groups
Windows Scheduled Task Service Spawned Shell
Scheduled Task, Command and Scripting Interpreter
Suspicious Process Executed From Container File
Malicious File, Masquerade File Type
Impacket Lateral Movement WMIExec Commandline Parameters
Remote Services, SMB/Windows Admin Shares, Distributed Component Object Model, Windows Management Instrumentation, Windows Service