LSASS Memory Access by Tool With Dump Keyword In Name
Detects LSASS process access requests from a source process with the "dump" keyword in its image name.
Sigma
Detects LSASS process access requests from a source process with the "dump" keyword in its image name.
Already have an account?