Summary
This document describes the use of a registry to track devices vulnerable to Mimikatz.
Settings
| Detection String | Comparator | Result | Applicable OS |
|---|
| {%-HKLM/SYSTEM/CurrentControlSet/Control/SecurityProviders/WDigest:UseLogonCredential-%} | Equals | 0 | Windows |