Which of the following attacks is MOST likely being detected?

A security analyst is performing a forensic investigation involving compromised account credentials. Using the Event Viewer, the analyst was able to defect the following message: "Special privileges assigned to new logon.’ Several of these messages did not have a valid logon associated with the user before these privileges were assigned.

Which of the following attacks is MOST likely being detected?
A . Pass-the-hash
B . Buffer overflow
C . Cross-site scripting
D . Session replay

View Answer

Answer: B