On Detection, Information Security, Research, Detection Engineering.
that if we want to detect user hunting or Session Enumeration more specifically, we must detect all implementations regardless of their modality. The truth is that most of us only detect some of the five. We may detect PowerView’s Get-NetSession because we are skeptical of PowerShell code. We may