https://blog.qife122.com/tags/%E8%93%9D%E9%98%9F%E6%A3%80%E6%B5%8B/ Recent content in 蓝队检测 on 办公AI智能小助手 Hugo zh-cn qife Sat, 06 Sep 2025 08:29:32 +0800 https://blog.qife122.com/p/%E5%90%AF%E7%94%A8msds-keycredentiallink%E5%8F%98%E6%9B%B4%E5%AE%A1%E8%AE%A1%E4%BB%A5%E9%98%B2%E5%BE%A1%E5%BD%B1%E5%AD%90%E5%87%AD%E6%8D%AE%E6%94%BB%E5%87%BB/ Sat, 06 Sep 2025 08:29:32 +0800 https://blog.qife122.com/p/%E5%90%AF%E7%94%A8msds-keycredentiallink%E5%8F%98%E6%9B%B4%E5%AE%A1%E8%AE%A1%E4%BB%A5%E9%98%B2%E5%BE%A1%E5%BD%B1%E5%AD%90%E5%87%AD%E6%8D%AE%E6%94%BB%E5%87%BB/ <h1 id="启用msds-keycredentiallink变更审计">启用msDS-KeyCredentialLink变更审计</h1> <p>标准审计配置不会记录msDS-KeyCredentialLink属性的变更。这给调查工作带来巨大挑战，直到信息安全合作伙伴TrustedSec提供了关键解决方案。</p>