Pass the Hash Detection WinEventLog:Security srilankanmonkey 3 Comments Vote Up +22 Vote Down -26You already voted! index=”wineventlog” ( EventCode=4624 Logon_Type=3 ) OR ( EventCode=4625 Logon_Type=3 ) Authentication_Package=”NTLM” NOT Account_Domain=YOURDOMAIN NOT Account_Name=”ANONYMOUS LOGON” Continue Reading →
