Triangulation | Huntress
ID: cad7acb0-776d-5cfd-8653-0e2ba998a815
STIX ID: report--cad7acb0-776d-5cfd-8653-0e2ba998a815
Feed Name: Huntress Blog
Threat Score
This article describes the concept of 'triangulation' for incident response: combining multiple telemetry sources (Windows registry EulaAccepted key, Background Activity Moderator/BAM, Prefetch, and EventID 7045) to corroborate PsExec lateral movement evidence and produce more credible, actionable incident reports.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.