Introduction
Windows Artifacts
Windows DFIR & MITTR
SOC Related
- Cached Credentials
- Domain Controller Password Spraying

Powered by GitBook

On this page

Was this helpful?

Windows Artifacts

Event IDs

File System

4663

Previous4688 - Process Created Next4656

Was this helpful?