Extending Event Forwarding Utilisation? RRS feed

  • Question

  • Hi All,

    The ATA doco covers forwarding event 4776 to the ATA gateways, but what about local authentication and other hacking techniques (such as silver tickets) that have no communication with the DC? Is there any intention to broaden the use of Windows Event Log subscriptions to enhance the detection capabilities of ATA? 

    Thursday, June 30, 2016 4:57 AM