Mimikatz and comsvcs.dll MiniDump lsass credential dumping

Ibrahim Saud@tektrix

•updated Jun 27, 2026•0•0•0

Detects common credential dumping techniques targeting the LSASS process memory, including the execution of Mimikatz, use of 'sekurlsa::logonpasswords', and memory dumps using comsvcs.dll or procdump.