Understanding Windows Access Token Manipulation: Finding Alternatives to winlogon.exe

Presented at HushCon Seattle 2019, Dec. 7, 2019, 3:30 p.m. (45 minutes). This presentation is not recorded.

No description available.

Presenters:

• Justin Bui / slyd0g   as Justin Bui (@slyd0g)

Similar Presentations:

• Black Hat Europe 2017 / A Process is No One: Hunting for Token Manipulation
• Black Hat USA 2020 Virtual / Detecting Access Token Manipulation