Credential Dumping Attempt Via Svchost

SigmaHQ Detections@sigmaHQ

•updated Apr 28, 2026•0•0•0

Detects when a process tries to access the memory of svchost to potentially dump credentials.