HackTool - Dumpert Process Dumper Execution

SigmaHQ Detections@sigmaHQ

•updated Jan 22, 2025•0•14

Detects the execution of Dumpert, a tool used to dump the memory of the lsass.exe process, which often contains sensitive credential material. Detection is based on specific MD5 hash values or the presence of 'Dumpert.dll' in the command line.