Network Provider DLL Registered for Credential Capture
Detects registration of malicious network provider DLLs to capture credentials
Microsoft Sentinel (KQL)

Detects registration of malicious network provider DLLs to capture credentials

Already have an account?