The Effectiveness of Tools in Detecting the 'Maleficent Seven' Privileges in the Windows Environment

Windows privileges add to the complexity of Windows user permissions. Each additional user added to a group could lead to a domain compromise if not evaluated. Privileges can override permission causing a gap of perceived effective permission. Currently, system administrators rely on tools such as...

By

Tobais McCurry

December 5, 2017

All papers are copyrighted. No re-posting of papers is permitted

Related Content

DFIR - Blog - A Prescription for Windows Prefetch Analysis_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

December 18, 2024

A Prescription for Windows Prefetch Analysis

The latest Siftgrab update includes a new function that generates several preformatted Excel workbooks.

DFIR - Blog - SOF-ELK's Evolution- A Comprehensive Update for Enhanced Digital Forensics_340 x 340(1).jpg

Digital Forensics, Incident Response & Threat Hunting

December 3, 2024

SOF-ELK®'s Evolution: A Comprehensive Update for Enhanced Digital Forensics

SOF-ELK is a free, open source bootable VM preconfigured with a custom Elastic Stack implementation tailored to security and investigative workflows.

Phil Hagen

Blog_teaser_images_(5).png

Digital Forensics, Incident Response & Threat Hunting

February 7, 2022

SANS DFIR Course Roadmap and Job Role Matrix

Here is our suggested Course Roadmap to guide you in your search for training. Use the Job Role Matrix to match a course with common job roles in DFIR