Microsoft has released KB5066360, a targeted hotpatch for Windows PowerShell that corrects an interoperability and security regression affecting PowerShell Direct (PSDirect) when host and guest virtual machines are unevenly patched; the update is a no-restart hotpatch for eligible systems and...
Hello All,
Greetings!!!
In our environment we monitor windows events 4624 and 4625 on AD for other workstations as all workstations can not integrated in a SIEM.
However, in event 4624 and 4625, we are not getting any type 10 or type 2 logon type that could tell us the interactive logon has...
activity
credentials
detection
eventevent 4624
event4625
guidance
interactive
logon
malicious software
monitoring
policy
security
siem
type 10
type 2
type 3
windows ad
workstation