Skeleton Key Domain Controller Patching Detected

Ankit Mehta@Secvyn

•updated Jun 29, 2026•0•0•1

Detects the execution of the Mimikatz tool or the usage of specific command-line arguments associated with common credential dumping and persistence techniques, such as Skeleton Key or LSASS patching.