HackTool - Mimikatz Kirbi File Creation (9e099d99-44c2-42b6-a6d8-54c3545cab29)
Detects the creation of files created by mimikatz such as ".kirbi", "mimilsa.log", etc.
Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
---|---|---|---|---|
HackTool - Mimikatz Kirbi File Creation (9e099d99-44c2-42b6-a6d8-54c3545cab29) | Sigma-Rules | Steal or Forge Kerberos Tickets - T1558 (3fc01293-ef5e-41c6-86ce-61f10706b64a) | Attack Pattern | 1 |