UseLogonCredential

Posts referencing this indicator

• Storm-1175 focuses gaze on vulnerable web-facing assets in high-tempo Medusa ransomware operations

  Registry entry modified by the attacker to turn on WDigest credential caching for credential theft.

  2026-05-13