Elasticsearch-Based Threat Hunting to Detect Privilege Escalation Using Registry Modification and Process Injection Attacks

Malicious actors often exploit persistence mechanisms, such as unauthorized modifications to Windows startup directories or registry keys, to achieve privilege escalation and maintain access on compromised systems. While information technology (IT) teams legitimately use these AutoStart Extension Po...

Fuld beskrivelse

Bibliografiske detaljer

Principais autores:	Akashdeep Bhardwaj, Luxmi Sapra, Shawon Rahman
Format:	Artigo
Sprog:	Inglês
Udgivet:	MDPI AG 2025-08-01
Serier:	Future Internet
Fag:	privilege escalation persistence windows registry startup directory AutoStart Extension Point (ASEP) Sysmon
Online adgang:	https://www.mdpi.com/1999-5903/17/9/394
Tags:	Tilføj Tag Ingen Tags, Vær først til at tagge denne postø!