Posted by: Pdfprep
Post Date: March 4, 2021
A security analyst is performing a forensic investigation involving compromised account credentials. Using the Event Viewer, the analyst was able to defect the following message: "Special privileges assigned to new logon.’ Several of these messages did not have a valid logon associated with the user before these privileges were assigned.
Which of the following attacks is MOST likely being detected?
A . Pass-the-hash
B . Buffer overflow
C . Cross-site scripting
D . Session replay
Answer: B
Leave a Reply