41,554 blogs · 5,225,211 posts Claim your blog

Record · corpus.blog/posts/01a08756-3b8e-73b3-a553-a45ca3217aa1

Exploring Mimikatz - Part 1 - WDigest

blog.xpnsec.com · published 10 May 2019

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.xpnsec.com Wayback capture

1blogs citing

First cited: 5 Aug 2020
Most recent: 5 Aug 2020
Rank this month: not ranked
External links: 10
Words captured: 3,098

Cited by

Blog

In the post

Date

Digging further into the Primary Refresh Token Read at the source ↗

5 Aug 2020

Links from this post

Link

Host

https://twitter.com/gentilkiwi

twitter.com

https://twitter.com/mysmartlogon

twitter.com

https://ghidra-sre.org/

ghidra-sre.org

https://github.com/NationalSecurityAgency/ghidra/issues/318

github.com

https://gist.github.com/xpn/e3837a4fdee8ea1b05f7fea5e7ea9444

gist.github.com

https://www.mdsec.co.uk/2019/03/silencing-cylance-a-case-study-in-modern-edrs/

mdsec.co.uk

https://gist.github.com/xpn/163360379f3cce2443a7b074f0a173b8

gist.github.com

https://docs.microsoft.com/en-us/windows/desktop/api/winreg/nf-winreg-regnotifychangekeyvalue

docs.microsoft.com

https://asciinema.org/a/VwaStfgka8FHmHWhXjmBmu8zV

asciinema.org

https://gist.github.com/xpn/12a6907a2fce97296428221b3bd3b394

gist.github.com

Elsewhere on blog.xpnsec.com (1)

Kernel Exploit Demo - Windows 10 privesc via WARBIRD Read at the source ↗

blog.xpnsec.com