Looking for trustworthy answers? Westonci.ca is the ultimate Q&A platform where experts share their knowledge on various topics. Get quick and reliable solutions to your questions from a community of experienced experts on our platform. Experience the ease of finding precise answers to your questions from a knowledgeable community of experts.

A security event popped up, alerting security of a suspicious user gaining access to, and copying files from, the %systemroot%\ntds\ file path on a server. what is the user trying to do?

Sagot :

There are different kinds of event.  What the user trying to do is to gather employee login credentials.

What is a credential harvester?

Credential Harvesting  is a term that is also called Account Harvesting. This is known to be a type of MITM attacks, DNS poisoning, phishing, etc.

It is often used to gather a lot of high numbers of credentials (such as username /or password combinations) and it is done mainly for reuse.

Learn more about security event from

https://brainly.com/question/25720881