Mimikatz Overview, Defenses and Detection

Mimikatz has become an extremely effective attack tool against Windows clients, allowing bad actors to retrieve cleartext passwords, as well as password hashes from memory. This paper will begin with an overview of Mimikatz's capabilities and payloadvectors. Several methods to mitigate the risk...

By

James Mulder

February 29, 2016

All papers are copyrighted. No re-posting of papers is permitted

Related Content

DFIR - Blog - Unraveling the Mysteries of Digital Forensics- A Blog on the Secret Life of Devices_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

2024 Recap of Windows Patch Tuesdays: Enhancements in Security and New Challenges

Microsoft’s Patch Tuesday updates have played a crucial role in addressing an array of vulnerabilities.

DFIR_ICON_(1).PNG

DFIR - Blog - The Evolution of Enterprise Threat Hunting- Detailed Insights from the SANS 2024_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

The Evolution of Enterprise Threat Hunting: Detailed Insights from the SANS 2024 Survey

The SANS Survey highlights threat hunting's evolution with increased formalization and strategic integration to enhance cybersecurity effectiveness.

DFIR_ICON_(1).PNG

DFIR - Blog - Adapting to Advanced Malware- Insights from the 2024 Cybersecurity Frontlines_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

Adapting to Advanced Malware: Insights from the 2024 Cybersecurity Frontlines

Blocking the execution of malicious code has always been a cat and mouse game between defenders and attackers.