Question 82:
A security analyst is performing a forensic investigation involving compromised account credentials. Using the Event Viewer, the analyst was able to detect the following message: Special privileges assigned to new logon. Several of these messages did not have a valid logon associated with the user before these privileges were assigned. Which of the following attacks is MOST likely being detected?
Answer options:
A. Pass-the-hash B. Buffer overflow C. Cross-site scripting D. Session replay