技术栈

advapi32

sitelist
12 小时前
sspirlogonuser·credunprotectw·advapi32
从logonui.exe返回到winlogon!SspiCli!SspirLogonUser到lsass.exe的SspiSrv!SspirLogonUserkd> .process Implicit process is now 81ea2030 kd> kc # 00 RPCRT4!NdrClientCall2 01 winlogon!ClientWluirDisplayStatus 02 winlogon!WluiDisplayStatus 03 winlogon!WlDisplayStatus 04 winlogon!WlDisplayStatusByResourceId 05 winlogon!WLGeneric_Authenticating_Exe
我是有底线的