Detecting RedSun Zero-Day in Microsoft Defender Using Elastic Security
What Is RedSun? RedSun is an unpatched zero-day Local Privilege Escalation (LPE) exploit that abuses a logic flaw in Microsoft […]
Detection Engineering
Threat Hunting
Hunting Scheduled Tasks
Scheduled tasks are a normal part of system operations, they help with updates, backups, and maintenance jobs.But attackers love them