HackTool - HandleKatz LSASS Dumper Execution

SigmaHQ Detections@sigmaHQ

•updated Nov 25, 2024•0•0•0

Detects the use of HandleKatz, a tool that demonstrates the usage of cloned handles to Lsass in order to create an obfuscated memory dump of the same