Post #766460

It is possible as a low privileged user to parse the Windows event logs for any ASR exclusion https://primusinterp.com/posts/WindowsASR/ #infosec #cybersecurity #redteam #pentest