Posts tagged "hunting"
- Lateral movement and Amcache: ProgramId pivoting across hosts
One suspicious ProgramId or Hash on host A becomes a query against every other host's Amcache. The playbook for scoping the spread across the estate.
2026-05-24
One suspicious ProgramId or Hash on host A becomes a query against every other host's Amcache. The playbook for scoping the spread across the estate.
2026-05-24