Mimikatz Use — Detection Rule

This method detects mimikatz keywords in different Eventlogs (some of them only appear in older Mimikatz version that are however still used by different threat groups)

Read the full analysis on IntelFusions