活動
起 2025-12-11 迄 2025-12-20
2025-12-12
- 14:46 一般 #1212 (Resolved-解决): INCGC-15090 -Low-Windows Authentication Replay Attack Detected
- 分析：
本案例涉及對主機 WCB20101 偵測到的 Kerberos 重播攻擊，攻擊源自 TAHOAD.TAHOHO.COM.TW，顯示可能存在中間人攻擊 (AiTM)。 TAHOAD.TAHOHO.COM.TW 上的進程 C... - 14:44 一般 #1212 (In process-進行中): INCGC-15090 -Low-Windows Authentication Replay Attack Detected
- Analysis:
The case involves a detected Kerberos replay attack on host WCB20101 , originating from TAHOAD.TAHOHO.... - 13:52 一般 #1212 (Closed-關閉): INCGC-15090 -Low-Windows Authentication Replay Attack Detected
- Analysis:
The case involves a detected Kerberos replay attack on host WCB20101 , originating from TAHOAD.TAHOHO....
匯出至 Atom