13241300x8000000000000000218424Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-SetValue2023-12-14 15:20:03.189{AE77D3C2-1D23-657B-FC03-000000003403}4108C:\Windows\system32\reg.exeHKLM\System\CurrentControlSet\Control\Lsa\DisableRestrictedAdminDWORD (0x00000000)ATTACKRANGE\Administrator 13241300x8000000000000000218422Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-SetValue2023-12-14 15:20:03.173{AE77D3C2-1D23-657B-FB03-000000003403}4216C:\Windows\system32\reg.exeHKLM\System\CurrentControlSet\Control\Lsa\NoLMHashDWORD (0x00000000)ATTACKRANGE\Administrator 13241300x8000000000000000218337Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-SetValue2023-12-14 15:19:30.384{AE77D3C2-1D02-657B-EA03-000000003403}4312C:\Windows\system32\reg.exeHKLM\System\CurrentControlSet\Control\Lsa\DisableRestrictedAdminDWORD (0x00000000)ATTACKRANGE\Administrator 13241300x8000000000000000218335Microsoft-Windows-Sysmon/Operationalar-win-dc.attackrange.local-SetValue2023-12-14 15:19:30.384{AE77D3C2-1D02-657B-E903-000000003403}3628C:\Windows\system32\reg.exeHKLM\System\CurrentControlSet\Control\Lsa\NoLMHashDWORD (0x00000000)ATTACKRANGE\Administrator