Introduction
Windows Artifacts
Windows DFIR & MITTR
SOC Related
- Cached Credentials
- Domain Controller Password Spraying

Powered by GitBook

On this page

Was this helpful?

Windows Artifacts

Event IDs

File System

1006

PreviousFile System Next4688 - Process Created

Was this helpful?