Chinese threat actor techniques in manipulating Windows Event Logs

Chinese threat actor techniques in manipulating Windows Event Logs

Events ID attacksDownload Chinese threat actors, particularly those aligned with PLA-affiliated APT units or MSS contractors, exhibit sophisticated techniques in manipulating Windows Event Logs to not only evade detection but to intentionally distort forensic analysis during supply chain intrusions. Analysis of the Events ID attacks document reveals a detailed catalog of critical Event IDs tied…