In this episode, we’ll show HOW and WHERE find evidence of hack. These 5 places might not be your first choice when you start investigation… and that’s exactly why you should check them first.

Sysmon can be useful for you because it provides a pretty detailed monitoring about what is happening in the operating system, starting from process monitoring, going through monitoring all the network and ending up with a discovery of the different types of exploitation techniques.

CQURE Team made another research in the secrets’ protection in Windows. With some great success!