Detection 2 Detecting known DLL hijacking and named pipe token impersonation attacks with Sysmon Nov 13, 2020 Enhanced logging to detect common attacks on Active Directory– Part 1 Feb 6, 2019