Unique collection of freeware utilities and freeware password recovery tools| NirSoft
Key Takeaways Initial access was via a password spray attack against an exposed RDP server, targeting numerous accounts over a four-hour period. Mimikatz and Nirsoft were used to harvest credential…| The DFIR Report
I've been going through the various token privileges on Windows trying to find where they're used. One which looked interesting is SeTruste...| www.tiraniddo.dev