Potential Credential Dumping Via LSASS Process Clone

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•0

Detects a suspicious LSASS process process clone that could be a sign of credential dumping activity