On Detection, Information Security, Research, Detection Engineering.
script, shown below in the getSessions function. Here, we see a call to the srvs.hNetrSessionEnum function, Impacket’s implementation of the [MS-SRVS] NetrSessionEnum RPC procedure (ms-srvs!NetrSessionEnum). According to the NetSessionEnum function call stack we built earlier, the