Lsass.exe spawning werfault.exe,efsui.exe,lsass.exe,nxserver.bin,WerFault.exe,WerFaultSecure.exe,installerevents.exe,MfeEpeHost.exe,epepccredentialproviderhelper.exe,6432transport.exe are this legitimate events or malicious
该文章介绍了一个专注于数字取证科学的 subreddit 社区,涵盖从计算机到手机、视频等多种数字设备的材料恢复与调查,主要应用于计算机犯罪案件,结合信息安全原则进行事件重建和归属认定。 2025-7-4 07:18:9 Author: www.reddit.com(查看原文) 阅读量:29 收藏

A banner for the subreddit

Dedicated to the branch of forensic science encompassing the recovery and investigation of material found in digital devices, often in relation to computer crime. This field involves the application of several information security principles and aims to provide for attribution and event reconstruction following forth from audit processes. This subreddit is not limited to just personal computers and encompasses all media that may also fall under digital forensics (e.g., cellphones, video, etc.).


Members Online


文章来源: https://www.reddit.com/r/computerforensics/comments/1lrck0j/lsassexe_spawning/
如有侵权请联系:admin#unsafe.sh