https://ipurple.team/2026/03/25/toast-notifications/https://ipurple.team/wp-content/uploads/2026/03/toast-notifications-event-id-3153.pngToast Notifications - Event ID 3153https://ipurple.team/wp-content/uploads/2026/03/toast-notifications-event-id-3052.pngToast Notifications - Event ID 3052https://ipurple.team/wp-content/uploads/2026/03/toast-notifications-event-id-2418.pngToast Notifications - Event ID 2418https://ipurple.team/wp-content/uploads/2026/03/toast-notifications-event-id-2416.pngToast Notifications - Event ID 2416https://ipurple.team/wp-content/uploads/2026/03/toast-notifications-edge-periodic-notification-count.pngToast Notifications - Edge Periodic Notification Counthttps://ipurple.team/wp-content/uploads/2026/03/toast-notifications-edge-lastnotificationaddedtime.pngToast Notifications - Edge LastNotificationAddedTimehttps://ipurple.team/wp-content/uploads/2026/03/toast-notifications-process-creation.pngToast Notifications - Process Creationhttps://ipurple.team/wp-content/uploads/2026/03/toast-notifications-msxml6-dll.pngToast Notifications - msxml6 DLLhttps://ipurple.team/wp-content/uploads/2026/03/toast-notifications-wpnapps-dll.pngToast Notifications - wpnapps DLLhttps://ipurple.team/wp-content/uploads/2026/03/toast-notifications-technique-abstract.jpgToast Notifications - Technique Abstract2026-03-25T09:55:35+00:00monthlyhttps://ipurple.team/2026/03/17/credential-guard/https://ipurple.team/wp-content/uploads/2026/03/credential-guard-process-handle.pngCredential Guard - Process Handlehttps://ipurple.team/wp-content/uploads/2026/03/remote-credential-guard-read-sysmon-logs-via-powershell-format.pngRemote Credential Guard - Read Sysmon Logs via PowerShell Formathttps://ipurple.team/wp-content/uploads/2026/03/credential-guard-read-sysmon-logs-via-powershell.pngCredential Guard - Read Sysmon Logs via PowerShellhttps://ipurple.team/wp-content/uploads/2026/03/credential-guard-dumpguard-dll.pngCredential Guard - DumpGuard DLLhttps://ipurple.team/wp-content/uploads/2026/03/credential-guard-kerberos-dll.pngCredential Guard - Kerberos DLLhttps://ipurple.team/wp-content/uploads/2026/03/credential-guard-tspkg-dll.pngCredential Guard - Tspkg DLLhttps://ipurple.team/wp-content/uploads/2026/03/credential-guard-sspicli-dll.pngCredential Guard - SSPICLI DLLhttps://ipurple.team/wp-content/uploads/2026/03/credential-access-kerberos-service-ticket-machine-account.pngCredential Access - Kerberos Service Ticket Machine Accounthttps://ipurple.team/wp-content/uploads/2026/03/credential-access-kerberos-tgt-ticket-machine-account.pngCredential Access - Kerberos TGT Ticket Machine Accounthttps://ipurple.team/wp-content/uploads/2026/03/credential-access-audit-kerberos.pngCredential Access - Audit Kerberos2026-03-17T12:02:02+00:00monthlyhttps://ipurple.team/2026/02/10/gac-hijacking/https://ipurple.team/wp-content/uploads/2026/02/chatgpt-image-feb-10-2026-02_25_46-pm.pngChatGPT Image Feb 10, 2026, 02_25_46 PMhttps://ipurple.team/wp-content/uploads/2026/02/gac-hijacking-miguicontrols.ni_.pngGAC Hijacking - MIGUIControls.nihttps://ipurple.team/wp-content/uploads/2026/02/gac-hijacking-miguicontrols-delete.pngGAC Hijacking - MIGUIControls Deletehttps://ipurple.team/wp-content/uploads/2026/02/gac-hijacking-file-deletion-mscorsw.pngGAC Hijacking - File Deletion mscorswhttps://ipurple.team/wp-content/uploads/2026/02/gac-hijacking-sysmon-file-creation-gac-poc-log.pngGAC Hijacking - Sysmon File Creation GAC POC Loghttps://ipurple.team/wp-content/uploads/2026/02/gac-hijacking-sysmon-file-creation-miguicontrols.pngGAC Hijacking - Sysmon File Creation MIGUIControlshttps://ipurple.team/wp-content/uploads/2026/02/gac-hijacking-sysmon-file-creation-miguicontrols-gac-poc.pngGAC Hijacking - Sysmon File Creation MIGUIControls GAC PoChttps://ipurple.team/wp-content/uploads/2026/02/gac-hijacking-mscorlib.pngGAC Hijacking - mscorlibhttps://ipurple.team/wp-content/uploads/2026/02/gac-hijacking-event-id-4663-miguicontrols.pngGAC Hijacking - Event ID 4663 MIGUIControlshttps://ipurple.team/wp-content/uploads/2026/02/gac-hijacking-auditing-folders.pngGAC Hijacking - Auditing Folders2026-02-10T12:26:33+00:00monthlyhttps://ipurple.team/2026/02/02/applocker-rules-abuse/https://ipurple.team/wp-content/uploads/2026/01/ghostlocker-feature.pngGhostLocker - Featurehttps://ipurple.team/wp-content/uploads/2026/01/ghostlocker-applocker-exe-policy.pngGhostLocker - AppLocker EXE Policyhttps://ipurple.team/wp-content/uploads/2026/01/ghostlocker-applocker-policies.pngGhostLocker - AppLocker Policieshttps://ipurple.team/wp-content/uploads/2026/01/ghostlocker-appid-service-status-change.pngGhostLocker - AppID Service Status Changehttps://ipurple.team/wp-content/uploads/2026/01/ghostlocker-exe-subkey-monitoring.pngGhostLocker - Exe Subkey Monitoringhttps://ipurple.team/wp-content/uploads/2026/01/ghostlocker-applocker-rule-4663-event-id.pngGhostLocker - AppLocker Rule 4663 Event IDhttps://ipurple.team/wp-content/uploads/2026/01/ghostlocker-applocker-rules-registry-key-auditing.pngGhostLocker - AppLocker Rules Registry Key Auditinghttps://ipurple.team/wp-content/uploads/2026/01/ghostlocker-event-id-4657.pngGhostLocker - Event ID 4657https://ipurple.team/wp-content/uploads/2026/01/ghostlocker-set-registry-key.pngGhostLocker - Set Registry Keyhttps://ipurple.team/wp-content/uploads/2026/01/ghostlocker-query-registry-key.pngGhostLocker - Query Registry Key2026-01-31T23:48:34+00:00monthlyhttps://ipurple.team/2026/01/12/edr-silencing/https://ipurple.team/wp-content/uploads/2026/01/edr-silencing-ipsec-filters-registry-key.pngEDR Silencing - IPSec Filters Registry Keyhttps://ipurple.team/wp-content/uploads/2026/01/edr-silencing-ipsec-filters-process-access-registry-key.pngEDR Silencing - IPSec Filters Process Access Registry Keyhttps://ipurple.team/wp-content/uploads/2026/01/edr-silencing-ipsec-filters-registry-key-modification.pngEDR Silencing - IPSec Filters Registry Key Modificationhttps://ipurple.team/wp-content/uploads/2026/01/edr-silencing-ipsec-filters-access-object.pngEDR Silencing - IPSec Filters Access Objecthttps://ipurple.team/wp-content/uploads/2026/01/edr-silencing-ipsec-filters-request-handle.pngEDR Silencing - IPSec Filters Request Handlehttps://ipurple.team/wp-content/uploads/2026/01/edr-silencing-ipsec-policy-agent.pngEDR Silencing - IPSec Policy Agenthttps://ipurple.team/wp-content/uploads/2026/01/edr-silencing-ipsec-policy-agent-loaded.pngEDR Silencing - IPSec Policy Agent Loadedhttps://ipurple.team/wp-content/uploads/2026/01/edr-silencing-audit-ipsec-filter-rules.pngEDR Silencing - Audit IPSec Filter Ruleshttps://ipurple.team/wp-content/uploads/2026/01/edr-silencing-name-resolution-policy-table-event-id-4657.pngEDR Silencing - Name Resolution Policy Table Event ID 4657https://ipurple.team/wp-content/uploads/2026/01/edr-silencing-name-resolution-policy-table-event-id-4663.pngEDR Silencing - Name Resolution Policy Table Event ID 46632026-01-12T15:28:59+00:00monthlyhttps://ipurple.team/2025/12/01/bind-link-edr-tampering/https://ipurple.team/wp-content/uploads/2025/11/bind-link.pngBind Linkhttps://ipurple.team/wp-content/uploads/2025/11/create-a-purple-digitized-and-futuristic-image-of-two-windows.pngcreate-a-purple-digitized-and-futuristic-image-of-two-windowshttps://ipurple.team/wp-content/uploads/2025/11/create-a-purple-digitized-and-futuristic-image-of-two-folders-1.pngcreate-a-purple-digitized-and-futuristic-image-of-two-foldershttps://ipurple.team/wp-content/uploads/2025/11/create-a-purple-digitized-and-futuristic-image-of-two-folders.pngcreate-a-purple-digitized-and-futuristic-image-of-two-foldershttps://ipurple.team/wp-content/uploads/2025/11/image-1.pngimagehttps://ipurple.team/wp-content/uploads/2025/11/folder-redirection-image-load-event.pngFolder Redirection - Image Load Eventhttps://ipurple.team/wp-content/uploads/2025/11/folder-redirection-bindflt.sys_.pngFolder Redirection - bindflt.syshttps://ipurple.team/wp-content/uploads/2025/11/folder-redirection-bindflt-dll.pngFolder Redirection - bindflt DLLhttps://ipurple.team/wp-content/uploads/2025/11/folder-redirection-dll.pngFolder Redirection - DLLhttps://ipurple.team/wp-content/uploads/2025/11/folder-redirection-bindflt-system-file.pngFolder Redirection - bindflt System File2025-11-30T02:58:53+00:00monthlyhttps://ipurple.team/2025/11/18/lsass-dump-windows-error-reporting/https://ipurple.team/wp-content/uploads/2025/11/lsass-dump-windows-error-reporting.pngLSASS Dump - Windows Error Reportinghttps://ipurple.team/wp-content/uploads/2025/11/create-an-image-to-visualise-lsass-dump-and-windows-error-1.pngcreate-an-image-to-visualise-lsass-dump-and-windows-errorhttps://ipurple.team/wp-content/uploads/2025/11/create-an-image-to-visualise-lsass-dump-and-windows-error.pngcreate-an-image-to-visualise-lsass-dump-and-windows-errorhttps://ipurple.team/wp-content/uploads/2025/11/image.pngimagehttps://ipurple.team/wp-content/uploads/2025/11/windows-error-reporting-png-file-size.pngWindows Error Reporting - PNG File Sizehttps://ipurple.team/wp-content/uploads/2025/11/windows-error-reporting-sysmon-file-create-event-id-11.pngWindows Error Reporting - Sysmon File Create Event ID 11https://ipurple.team/wp-content/uploads/2025/11/windows-error-reporting-sysmon-file-create.pngWindows Error Reporting - Sysmon File Createhttps://ipurple.team/wp-content/uploads/2025/11/windows-error-reporting-wsass-access-png.pngWindows Error Reporting - WSASS Access PNGhttps://ipurple.team/wp-content/uploads/2025/11/windows-error-reporting-werfaultsecure-access-png-1.pngWindows Error Reporting - WerFaultSecure Access PNGhttps://ipurple.team/wp-content/uploads/2025/11/windows-error-reporting-wsass-access-werfaultsecure-process.pngWindows Error Reporting - WSASS Access WerFaultSecure Process2025-11-18T12:43:57+00:00monthlyhttps://ipurple.team/2025/09/02/golden-dmsa/https://ipurple.team/wp-content/uploads/2025/09/golden-dmsa-cover.pngGolden dMSA - Coverhttps://ipurple.team/wp-content/uploads/2025/09/golden-dmsa-elastic-event-id-4771-json.pngGolden dMSA - Elastic Event ID 4771 JSONhttps://ipurple.team/wp-content/uploads/2025/09/golden-dmsa-elastic-event-id-4771.pngGolden dMSA - Elastic Event ID 4771https://ipurple.team/wp-content/uploads/2025/09/golden-dmsa-event-ids-4771.pngGolden dMSA - Event IDs 4771https://ipurple.team/wp-content/uploads/2025/09/golden-dmsa-event-id-4771.pngGolden dMSA - Event ID 4771https://ipurple.team/wp-content/uploads/2025/09/golden-dmsa-audit-kerberos-authentication-service.pngGolden dMSA - Audit Kerberos Authentication Servicehttps://ipurple.team/wp-content/uploads/2025/09/golden-dmsa-object-type-monitoring.pngGolden dMSA - Object Type Monitoringhttps://ipurple.team/wp-content/uploads/2025/09/golden-dmsa-event-ids-4662-object-type.pngGolden dMSA - Event IDs 4662 Object Typehttps://ipurple.team/wp-content/uploads/2025/09/golden-dmsa-audit-dmsa-ou.pngGolden dMSA - Audit dMSA OUhttps://ipurple.team/wp-content/uploads/2025/09/golden-dmsa-elastic-event-id-4662-json.pngGolden dMSA - Elastic Event ID 4662 JSON2025-09-02T08:56:32+00:00monthlyhttps://ipurple.team/2025/08/12/active-directory-enumeration-adws/https://ipurple.team/wp-content/uploads/2025/08/file_00000000d5b8620a82fb77345dffc4271415685304965432676.pngActive Directory Enumeration - Web Serviceshttps://ipurple.team/wp-content/uploads/2025/08/activedirectorywebservicesenumeration-sysmoneventid35518401098391088004.jpgactive directory web services enumeration - sysmon event id 35518401098391088004.https://ipurple.team/wp-content/uploads/2025/08/activedirectorywebservicesenumeration-sysmonnetworkrule1428731702591070994.jpgactive directory web services enumeration - sysmon network rule1428731702591070994.https://ipurple.team/wp-content/uploads/2025/08/activedirectorywebservicesenumeration-sysmonupdateconfiguration1827723957242509384.jpgactive directory web services enumeration - sysmon update configuration1827723957242509384.https://ipurple.team/wp-content/uploads/2025/08/activedirectorywebservicesenumeration-honeyreadaccess7885805399706728255.jpgactive directory web services enumeration - honey read access7885805399706728255.https://ipurple.team/wp-content/uploads/2025/08/activedirectorywebservicesenumeration-honeycn1336239088163545228.jpgactive directory web services enumeration - honey cn1336239088163545228.https://ipurple.team/wp-content/uploads/2025/08/activedirectorywebservicesenumeration-honeyou6133686870232668265.jpgactive directory web services enumeration - honey ou6133686870232668265.https://ipurple.team/wp-content/uploads/2025/08/activedirectorywebservicesenumeration-honeyaccountauditingaccess6245954388327864648.jpgactive directory web services enumeration - honey account auditing access6245954388327864648.https://ipurple.team/wp-content/uploads/2025/08/activedirectorywebservicesenumeration-honeyaccountauditing4246943462409703850.jpgactive directory web services enumeration - honey account auditing4246943462409703850.https://ipurple.team/wp-content/uploads/2025/08/activedirectorywebservicesenumeration-honeyaccount512029213348691516.jpgactive directory web services enumeration - honey account512029213348691516.2025-08-11T13:38:45+00:00monthlyhttps://ipurple.team/2025/08/04/lateral-movement-bitlocker/https://ipurple.team/wp-content/uploads/2025/08/lateralmovement-bitlockmoveenumeration466181143718513940.jpglateral movement - bitlockmove enumeration466181143718513940.https://ipurple.team/wp-content/uploads/2025/08/lateralmovement-bitlockerelevatedsession9108142949105591720.jpglateral movement - bitlocker elevated session9108142949105591720.https://ipurple.team/wp-content/uploads/2025/08/lateralmovement-bitlockmovecommand7847472286666357766.jpglateral movement - bitlockmove command7847472286666357766.https://ipurple.team/wp-content/uploads/2025/08/lateralmovement-bitlockmove6492114901152635910.jpglateral movement - bitlockmove6492114901152635910.https://ipurple.team/wp-content/uploads/2025/08/lateralmovement-bitlockergraph8401883889093646849.jpglateral movement - bitlocker graph8401883889093646849.https://ipurple.team/wp-content/uploads/2025/08/bitlockerlateralmovement-techniqueabstract6071720006740397775.jpgbitlocker lateral movement - technique abstract6071720006740397775.https://ipurple.team/wp-content/uploads/2025/08/image_editor_output_image2554668-17540819238805895131958032876859.pngimage_editor_output_image2554668-17540819238805895131958032876859https://ipurple.team/wp-content/uploads/2025/08/lateralmovementbitlocker-eventid7040autostart8741064282474694975.jpglateral movement bitlocker - event id 7040 auto start8741064282474694975.https://ipurple.team/wp-content/uploads/2025/08/lateralmovementbitlocker-remoteregistryservicedisabled8321514537273760210.jpglateral movement bitlocker - remote registry service disabled8321514537273760210.https://ipurple.team/wp-content/uploads/2025/08/file_00000000333c620a8fb96604f6ea9d963328309426966680648.pngfile_00000000333c620a8fb96604f6ea9d9633283094269666806482025-08-02T09:44:41+00:00monthlyhttps://ipurple.team/2025/07/28/badsuccessor/https://ipurple.team/wp-content/uploads/2025/07/badsuccessor-eventid29463188691015155512574.jpgbadsuccessor - event id 29463188691015155512574.https://ipurple.team/wp-content/uploads/2025/07/badsuccessor-eventid5136useraccountcontrol6490941818150729453.jpgbadsuccessor - event id 5136 useraccountcontrol6490941818150729453.https://ipurple.team/wp-content/uploads/2025/07/badsuccessor-eventid51365851547285689787088.jpgbadsuccessor - event id 51365851547285689787088.https://ipurple.team/wp-content/uploads/2025/07/badsuccessor-eventid513742082286768021133.jpgbadsuccessor - event id 513742082286768021133.https://ipurple.team/wp-content/uploads/2025/07/badsuccessor-ouauditing2657755477052462092.jpgbadsuccessor - ou auditing2657755477052462092.https://ipurple.team/wp-content/uploads/2025/07/badsuccessor-dsaccessauditing6628104173512545306.jpgbadsuccessor - ds access auditing6628104173512545306.https://ipurple.team/wp-content/uploads/2025/07/badsuccessor7867205510821766004.jpgbadsuccessor7867205510821766004https://ipurple.team/wp-content/uploads/2025/07/badsuccessor-eventid29467897358110126606832.jpgbadsuccessor - event id 29467897358110126606832.https://ipurple.team/wp-content/uploads/2025/07/badsuccessor-eventid5136useraccountcontrol1871514895227719625.jpgbadsuccessor - event id 5136 useraccountcontrol1871514895227719625.https://ipurple.team/wp-content/uploads/2025/07/badsuccessor-eventid51366493200368330568248.jpgbadsuccessor - event id 51366493200368330568248.2025-07-27T09:01:01+00:00monthlyhttps://ipurple.team/2024/10/10/measuring-detection-coverage/https://ipurple.team/wp-content/uploads/2024/10/cyber-detection-coverage.webpCyber Detection Coveragehttps://ipurple.team/wp-content/uploads/2024/10/image.pngimagehttps://ipurple.team/wp-content/uploads/2024/10/detection-rules-coverage-mapping-gaps-2.jpgDetection Rules Coverage Mapping Gapshttps://ipurple.team/wp-content/uploads/2024/10/detection-rules-coverage-mapping-gaps-1.jpgDetection Rules Coverage Mapping Gapshttps://ipurple.team/wp-content/uploads/2024/10/detection-rules-coverage-mapping-gaps.jpgDetection Rules Coverage Mapping Gapshttps://ipurple.team/wp-content/uploads/2024/10/detection-rules-mapping-2.jpgDetection Rules Mappinghttps://ipurple.team/wp-content/uploads/2024/10/detection-rules-mapping-1.jpgDetection Rules Mappinghttps://ipurple.team/wp-content/uploads/2024/10/detection-rules-mapping.jpgDetection Rules Mappinghttps://ipurple.team/wp-content/uploads/2024/10/detection-rules-confidence-level.jpgDetection Rules Confidence Levelhttps://ipurple.team/wp-content/uploads/2024/10/detection-ratio.jpgDetection Ratio2024-10-10T13:48:10+00:00monthlyhttps://ipurple.team/2024/09/10/browser-stored-credentials/https://ipurple.team/wp-content/uploads/2024/09/web-browser-stored-credentials-sharpchrome.pngWeb Browser Stored Credentials - SharpChromehttps://ipurple.team/wp-content/uploads/2024/09/browser-stored-credentials.webpBrowser Stored Credentialshttps://ipurple.team/wp-content/uploads/2024/09/browser-stored-credentials-technique-abstract.jpgBrowser Stored Credentials - Technique Abstracthttps://ipurple.team/wp-content/uploads/2024/09/dpapi-encrypt-decrypt.jpgDPAPI - Encrypt Decrypthttps://ipurple.team/wp-content/uploads/2024/09/web-browser-stored-credentials-domain-backup-key.pngWeb Browser Stored Credentials - Domain Backup Keyhttps://ipurple.team/wp-content/uploads/2024/09/web-browser-stored-credentials-audit-other-object-access-events.pngWeb Browser Stored Credentials - Audit Other Object Access Eventshttps://ipurple.team/wp-content/uploads/2024/09/web-browser-stored-credentials-process-id.pngWeb Browser Stored Credentials - Process IDhttps://ipurple.team/wp-content/uploads/2024/09/web-browser-stored-credentials-process-id-hexadecimal.pngWeb Browser Stored Credentials - Process ID Hexadecimalhttps://ipurple.team/wp-content/uploads/2024/09/web-browser-stored-credentials-crypto-dpapi-16385-event-id.pngWeb Browser Stored Credentials - Crypto DPAPI 16385 Event IDhttps://ipurple.team/wp-content/uploads/2024/09/web-browser-stored-credentials-crypto-dpapi.pngWeb Browser Stored Credentials - Crypto DPAPI2024-09-08T07:35:58+00:00monthlyhttps://ipurple.team/contact-us/2024-08-07T08:15:07+00:00weekly0.6https://ipurple.team/2024/07/15/sharphound-detection/https://ipurple.team/wp-content/uploads/2024/07/image-1.pngimagehttps://ipurple.team/wp-content/uploads/2024/07/dallc2b7e-2024-07-14-22.40.24-a-highly-futuristic-and-digital-3d-network-visualization-with-nodes-in-various-vibrant-shades-of-purple.-the-nodes-should-represent-different-elements.webpDALL·E 2024-07-14 22.40.24 - A highly futuristic and digital 3D network visualization with nodes in various vibrant shades of purple. The nodes should represent different elementshttps://ipurple.team/wp-content/uploads/2024/07/image.pngimagehttps://ipurple.team/wp-content/uploads/2024/07/bloodhound-silketw-yara-rule.pngBloodHound - SilkETW Yara Rulehttps://ipurple.team/wp-content/uploads/2024/07/bloodhound-etw-ldap-logs.pngBloodHound - ETW LDAP Logshttps://ipurple.team/wp-content/uploads/2024/07/bloodhound-silketw-ldap-logs.pngBloodHound - SilkETW LDAP Logshttps://ipurple.team/wp-content/uploads/2024/07/bloodhound-silketw.pngBloodHound - SilkETWhttps://ipurple.team/wp-content/uploads/2024/07/bloodhound-event-id-4662.pngBloodHound - Event ID 4662https://ipurple.team/wp-content/uploads/2024/07/bloodhound-event-id-5145.pngBloodHound - Event ID 5145https://ipurple.team/wp-content/uploads/2024/07/bloodhound-event-id-5145-sysvol.pngBloodHound - Event ID 5145 SYSVOL2024-07-14T20:02:51+00:00monthlyhttps://ipurple.team/2024/02/21/detection-rules-development-framework/https://ipurple.team/wp-content/uploads/2024/02/detection-rules-development-framework-purple.webpDetection Rules Development Framework-Purplehttps://ipurple.team/wp-content/uploads/2024/02/technique-abstract.jpgtechnique-abstracthttps://ipurple.team/wp-content/uploads/2024/02/detection-rules-development-framework.jpgdetection-rules-development-framework2024-02-20T23:54:35+00:00monthlyhttps://ipurple.team/2024/01/03/scheduled-task-tampering/https://ipurple.team/wp-content/uploads/2023/12/scheduled-task-tampering-threat-hunting-chainsaw.pngscheduled-task-tampering-threat-hunting-chainsawhttps://ipurple.team/wp-content/uploads/2023/12/scheduled-task-tampering-no-scheduled-task-events.pngscheduled-task-tampering-no-scheduled-task-eventshttps://ipurple.team/wp-content/uploads/2023/12/scheduled-task-tampering-cachetask-xml.pngscheduled-task-tampering-cachetask-xmlhttps://ipurple.team/wp-content/uploads/2023/12/schedule-task-tampering.pngSchedule Task Tamperinghttps://ipurple.team/wp-content/uploads/2023/12/scheduled-task-tampering-schtasks-run.pngscheduled-task-tampering-schtasks-runhttps://ipurple.team/wp-content/uploads/2023/12/scheduled-task-tampering-task-scheduler.pngscheduled-task-tampering-task-schedulerhttps://ipurple.team/wp-content/uploads/2023/12/scheduled-task-tampering-scheduled-task-run.pngscheduled-task-tampering-scheduled-task-runhttps://ipurple.team/wp-content/uploads/2023/12/scheduled-task-tampering-sysmon-event-id-1-svchost.pngscheduled-task-tampering-sysmon-event-id-1-svchosthttps://ipurple.team/wp-content/uploads/2023/12/scheduled-task-tampering-sysmon-event-id-13.pngscheduled-task-tampering-sysmon-event-id-13https://ipurple.team/wp-content/uploads/2023/12/scheduled-task-tampering-sysmon-event-id-7.pngscheduled-task-tampering-sysmon-event-id-72024-02-11T22:07:24+00:00monthlyhttps://ipurple.team/about/https://ipurple.team/wp-content/uploads/2024/01/image-6.pngimage-6https://ipurple.team/wp-content/uploads/2024/01/image-5.pngimage-5https://ipurple.team/wp-content/uploads/2024/01/image-4.pngimage-4https://ipurple.team/wp-content/uploads/2024/01/image-1.pngimage-1https://ipurple.team/wp-content/uploads/2024/01/image.pngimage2024-01-02T22:41:32+00:00weekly0.6https://ipurple.team/mitre-attck/2023-11-04T22:03:47+00:00weekly0.6https://ipurple.teamdaily1.02026-03-25T09:55:35+00:00