Which of the following attacks is MOST likely being detected?

A security analyst is performing a forensic investigation compromised account credentials. Using the Event Viewer, the analyst able to detect the following message, ‘’Special privileges assigned to new login.’’ Several of these messages did not have a valid logon associated with the user before these privileges were assigned .

Which of the following attacks is MOST likely being detected?
A . Pass-the-hash
B . Buffer overflow
C . Cross-site scripting
D . Session replay

View Answer

Answer: A

Explanation:

https://www.beyondtrust.com/resources/glossary/pass-the-hash-pth-attack