Discover a wealth of knowledge at Westonci.ca, where experts provide answers to your most pressing questions. Explore our Q&A platform to find reliable answers from a wide range of experts in different fields. Connect with a community of professionals ready to help you find accurate solutions to your questions quickly and efficiently.

A security event popped up, alerting security of a suspicious user gaining access to, and copying files from, the %systemroot%\ntds\ file path on a server. what is the user trying to do?

Sagot :

There are different kinds of event.  What the user trying to do is to gather employee login credentials.

What is a credential harvester?

Credential Harvesting  is a term that is also called Account Harvesting. This is known to be a type of MITM attacks, DNS poisoning, phishing, etc.

It is often used to gather a lot of high numbers of credentials (such as username /or password combinations) and it is done mainly for reuse.

Learn more about security event from

https://brainly.com/question/25720881