DumpMinitool Execution

SigmaHQ Detections@sigmaHQ

•updated Apr 25, 2025•0•13

Detects the execution of 'DumpMinitool.exe', a tool used to dump process memory, specifically targeting the 'MiniDumpWriteDump' function. This tool can be used to extract credentials from processes like LSASS.