Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- sourcetype="WinEventLog:Microsoft-Windows-Sysmon/Operational" EventCode=10 TargetImage="*lsass.exe" | stats count,values(TargetImage) by SourceImage | sort + count
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement