WCE wceaux.dll Access (1de68c67-af5c-4097-9c85-fe5578e09e67)
Detects wceaux.dll access while WCE pass-the-hash remote command execution on source host
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| WCE wceaux.dll Access (1de68c67-af5c-4097-9c85-fe5578e09e67) | Sigma-Rules | OS Credential Dumping - T1003 (0a3ead4e-6d47-4ccb-854c-a6a4f9d96b22) | Attack Pattern | 1 |