On Detection, Information Security, Research, Detection Engineering.
Mimikatz was the primary method of stealing credentials; still, user hunting continues to be necessary for identity snowball attacks regardless of the credential access technique used. Later, “user hunting” became the foundation of the popular attack path mapping project BloodHound. Initially,