From 2a34a5ca521fc8d79d9cf3e3f76df62cdf135cb7 Mon Sep 17 00:00:00 2001 From: Tomas Kracmar Date: Fri, 12 Apr 2024 20:42:07 +0200 Subject: [PATCH] Typo fix --- README.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 23c7969..5181aaa 100644 --- a/README.md +++ b/README.md @@ -35,6 +35,7 @@ Run script Elysium.ps1 as an administrator and choose option 4 (Uninstall). The script will then delete everything and remove the passphrase variable. --- ## FAQ + ### What happens to the hashes we uploaded? These hashes are subjected to cracking. Any cracked hash is then added to KHDB. Hash cracking happens on dedicated air-gapped machine and all sensitive material is never decrypted outside this machine. Secure exchange of decryption keys is arranged beforehand with every client. ### Do we need to upload the hashes? @@ -61,4 +62,4 @@ They are paired online while running the script. KHDB does not contain usernames ### Would our EDR solution interfere with this tool? It should! If you have EDR installed on the host machine, this tool should be exceptioned. ### Would our monitoring tool detect this activity? -It should, as it is extremely sensitive operation that should never happen outside of this (or similar) procedure. Running this tool should be cleared with your SOC beforehand (or used as a test case). \ No newline at end of file +It should, as it is extremely sensitive operation that should never happen outside of this (or similar) procedure. Running this tool should be cleared with your SOC beforehand (or used as a test case).