Windows Attacks & Defense, DCSync

"After performing the DCSync attack, connect to DC1 as ‘htb-student:HTB_@cademy_stdnt!’ and look at the logs in Event Viewer. What is the Task Category of the events generated by the attack? "
I think i tried every existing Task Category, not just those that I’ve Found in logs…

Any help or hints are very welcome…thank you!

The security event view dashboard has a column with nomenclature “Task Category”, you will find the answer in the last events logged.

1 Like