hxxps://posts.specterops[.]io/operational-guidance-for-offensive-user-dpapi-abuse-1fb7fac8b107URL
Reported by 1 independent source · first reported by Elastic Security Labs · last reported
Last reported 3 years ago
What the reports say
1 report, newest first · the exact sentence from each-
Detect Credential Access with Elastic Security“hxxps://posts.specterops[.]io/operational-guidance-for-offensive-user-dpapi-abuse-1fb7fac8b107”
Indicators reported together
named in the same reports- process[.]pidin 1 report
- posts.specterops[.]ioin 1 report
- 9375cff0413111d3b88a00104b2a6676in 1 report
- hxxps://github[.]com/AlessandroZ/LaZagnein 1 report
- hxxps://github[.]com/GhostPack/Seatbeltin 1 report
- hxxps://github[.]com/gtworek/PSBits/tree/master/LSASecretDumperin 1 report
- hxxps://github[.]com/swisskyrepo/PayloadsAllTheThings/blob/master/Methodology%20and%20Resources/Windows%20-%20Mimikatz.mdin 1 report
Copy these 7 indicators · defanged
Thanks — we review every report.