WEB_IIS SAM Attempt

 

Code: p1134

Severity: Warning

 

Description: This event is generated when an attempt is made to access the Windows Security Accounts Manager (SAM) password file via a web request.

Impact: Information gathering - An attacker tried to get the Windows password file

Corrective: Change all Windows passwords. Apply appropriate vendor supplied patches. Upgrade to the latest non-affected version of the software.