Висит на следующих endpoints:
- named pipe PIPE\atsvc
- named pipe PIPE\srvsvc
- named pipe \PIPE\protected_storage
- named pipe pipe\lsass
- named pipe \pipe\trkwks
- ALPC Port LSMApi
- ALPC Port protected_storage
- ALPC Port audit
- ALPC Port samss lpc
- ALPC Port securityevent
- ALPC Port IUserProfile2
- ALPC Port senssvc
- ALPC Port SECLOGON
- ALPC Port trkwks
0xf methods:
- s_OnInitialConnection
- s_OnCreateSession
- s_OnStartScreenSaverAsDefaultUser
- s_OnStopScreenSaverAsDefaultUser
- s_OnLogon
- s_OnLock
- s_OnUnlock
- s_OnStartScreenSaverAsUser
- s_OnStopScreenSaverAsUser
- s_OnDisconnect
- s_OnReconnect
- s_OnLogoff
- s_OnTerminateSession
- s_OnStartShell
- s_OnEndShell
Комментариев нет:
Отправить комментарий