Hunting in the Sysmon Call Trace https://www.lares.com/wp-content/uploads/2021/01/chris-liverani-dBI_My696Rk-unsplash.jpg 1090 817 Anton Ovrutsky https://secure.gravatar.com/avatar/ba20a53800565e497a2e9e70253bfe87?s=96&d=mm&r=g
Intro The Sysmon ProcessAccess event has been used in threat hunting and detection efforts in order to alert on techniques such as process injection and credential access. According to the…
read more