Detects the execution of LsaRecorder, a credential dumping tool used by CL-UNK-1068.
Already have an account? Log in
