Detection: Challenging Paradigms cover image

Episode 6: Matt Graeber

Detection: Challenging Paradigms

00:00

Detecting a Credential Dumping From Elsas

When you open a handle to a process, you have to specify what you intend to do with that process. Not everybody can just open aHandle to elsas to do whatever they want. There's a dackle in place ofdiscre nay access control list. And so if you're only searching for ten, ten, nowYou've missed that. That's like we are teaching, we in the in this course is like, i'd like to take credit for it but it was kind of unintentional.

Play episode from 52:03
Transcript

The AI-powered Podcast Player

Save insights by tapping your headphones, chat with episodes, discover the best highlights - and more!
App store bannerPlay store banner
Get the app