Ctrlk

Introduction
Windows Artifacts
Windows DFIR & MITTR
SOC Related
- Cached Credentials
- Domain Controller Password Spraying

Powered by GitBook

Page cover

On this page

Was this helpful?

Windows Artifacts

Persistence

Registry Scheduled Tasks Startup Tool: AutoRuns Accounts WMI Event Consumers PowerShell Scripts CrowdStrike Searches

Previous.lnk Files NextRegistry

Last updated 1 year ago

Was this helpful?