# Sysmon1 postHunting for LOLBins in Windows Event Logs: certutil & bitsadmin Blue Team · Mar 6, 2026