The Evolution of Protected Processes Part 1: Pass-the-Hash Mitigations in Windows 8.1 « Alex Ionescu

The Evolution of Protected Processes Part 1: Pass-the-Hash Mitigations in Windows 8.1 « Alex Ionescu

瀏覽:459
日期:2024-05-06
Let’s do some quick math and see if the LSASS process on my hardened Windows 8.1 system matches: lkd> !process 0 0 lsass.exe PROCESS ffffe000049ab900 lkd> ?? ((nt!_EPROCESS*)0xffffe000049ab900)->Protection.Level unsigned char 0x41' Because the ......看更多