diff --git a/hayabusa/builtin/Security/LogonLogoff/Logon/Sec_4624_Info_Logon-Type-10-RemoteInteractive.yml b/hayabusa/builtin/Security/LogonLogoff/Logon/Sec_4624_Info_Logon-Type-10-RemoteInteractive.yml index 4bdbf2e41..0b5518fd0 100644 --- a/hayabusa/builtin/Security/LogonLogoff/Logon/Sec_4624_Info_Logon-Type-10-RemoteInteractive.yml +++ b/hayabusa/builtin/Security/LogonLogoff/Logon/Sec_4624_Info_Logon-Type-10-RemoteInteractive.yml @@ -3,7 +3,7 @@ date: 2020/11/08 modified: 2022/12/16 title: 'Logon (RemoteInteractive (RDP)) *Creds in memory*' -description: Type 9 logons can be dangerous as the credentials (plaintext or hashed passwords) are stored in memory (lsass process) and can be stolen by tools like mimikatz. +description: Type 10 logons can be dangerous as the credentials (plaintext or hashed passwords) are stored in memory (lsass process) and can be stolen by tools like mimikatz. id: a4e05f05-ff88-48b9-8524-a88c1c32fe19 level: informational