Analyzing Evil with Sysmon: A Step-by-Step Guide to DLL Hijacking, Unmanaged PowerShell, and Credential Dumping (HTB Walkthrough)
In this guide, I will walk you through three common attack techniques from the HackTheBox “Windows Event Logs & Finding Evil” module and learn how to identify their traces using Sysmon. Each section includes:
What the technique is
Why it works
Exa...
