DCSync – WindowsTechs.com

Incomplete information in dcsync logs [migrated]

Posted on March 5, 2022 by daisy

I’ve enabled DS audits in domain controller group policy:

Then I perform dcsync attack with a normal user account, and check the logs in ELK:

Two logs were created and the DS-Replication-Get-Changes-All log is generated correctly, and no… Continue reading Incomplete information in dcsync logs [migrated]→

Yossi Sassi, Javelin Networks – Paul’s Security Weekly #580

Posted on October 28, 2018 by Security Weekly Productions

Yossi Sassi is the Co-Founder and Cybersecurity Researcher at CyberArtSecurity.com. Yossi joins us for a tech segment to talk about using windows powershell, discussing DCSync, DCShadow, creative Event Log manipulation & thoughts about persistence…. Continue reading Yossi Sassi, Javelin Networks – Paul’s Security Weekly #580→