TA-regmon-mimikatz

This app watches critical registry settings needed for storing credentials in memory. Ideally this registry keys should always be disabled. If you're under attack Splunk will detect and alert with the help of this app. https://www.praetorian.com/blog/mitigating-mimikatz-wdigest-cleartext-credential-theft