https://x7peeps.com/tags/%E5%A8%81%E8%83%81%E7%8B%A9%E7%8C%8E/index.htmlHugozh-CNThu, 11 Jun 2026 12:00:00 +0800https://x7peeps.com/%E5%AE%89%E5%85%A8/%E5%BA%94%E6%80%A5%E5%93%8D%E5%BA%94/0x03%E5%8F%96%E8%AF%81%E5%88%86%E6%9E%90/Windows%E4%BA%8B%E4%BB%B6%E6%97%A5%E5%BF%97%E7%8B%A9%E7%8C%8E%E4%B8%8E%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8%E6%BA%AF%E6%BA%90/index.htmlThu, 11 Jun 2026 12:00:00 +0800https://x7peeps.com/%E5%AE%89%E5%85%A8/%E5%BA%94%E6%80%A5%E5%93%8D%E5%BA%94/0x03%E5%8F%96%E8%AF%81%E5%88%86%E6%9E%90/Windows%E4%BA%8B%E4%BB%B6%E6%97%A5%E5%BF%97%E7%8B%A9%E7%8C%8E%E4%B8%8E%E6%A8%AA%E5%90%91%E7%A7%BB%E5%8A%A8%E6%BA%AF%E6%BA%90/index.html深入解析Windows EVTX日志机制，结合Sysmon探讨如何从海量日志中精准狩猎横向移动（PtH、PsExec、WMI）与权限维持痕迹。