Wdigest Enable UseLogonCredential

Google SecOps@GoogleSecOps

•updated Jun 25, 2025•2•0•1

Detects potential malicious modification of the property value of UseLogonCredential from HKLM:\\SYSTEM\\CurrentControlSet\\Control\\SecurityProviders\\WDigest to enable clear-text credentials