Wdigest Enable UseLogonCredential

SigmaHQ Detections@sigmaHQ

•updated Aug 17, 2023•0•0•1

Detects potential malicious modification of the property value of UseLogonCredential from HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\WDigest to enable clear-text credentials