About

Hooks for intercepting SpAcceptLsaModeContext to print any incoming authentication attempts to Beacon. The hook is installed on the Lsass heap to make it easy, rather than hooking the DLL image directly.

Author

Written by Austin Hudson