Skip to content

Latest commit

 

History

History
6 lines (6 loc) · 433 Bytes

A user changed the Windows system time.md

File metadata and controls

6 lines (6 loc) · 433 Bytes

Description

A user changed the Windows system time. This may be indicative of a malicious activity and may affect authentication from the source machine.

Attacker's Goals

A malicious insider might change their Windows system time. This action might affect the machine's ability to authenticate to the domain.

Investigative Actions

Check for any other suspicious activity related to the host and the user involved in the alert.