issues
search
mttaggart
/
wtfbins
WTF are these binaries doing?! A list of benign applications that mimic malicious behavior.
MIT License
142
stars
10
forks
source link
[New WTFBin]: Guest user tries to login whenever a folder gets shared with "Everyone"
#40
Closed
ygil1234
closed
10 months ago
ygil1234
commented
1 year ago
Contributor Name: ygil1234
Application/Executable: Windows Explorer (explorer.exe)
WTF Behavior Description: Sharing a Windows folder with "Everyone" permissions, will cause a failed logon of user Guest.
Link to Documentation of Behavior: Found that behavior while investigating an incident, here is another similar case -
https://learn.microsoft.com/en-us/answers/questions/224757/failed-type-3-logons-on-domain-workstation-by-gues#:~:text=4%3A56%20AM-,Hello%2C,-Thank%20you%20so
**Please provide any images for additional evidence.
**
mttaggart
commented
10 months ago
Thanks for your patience! Added in a5c5422
**