Potential Credential Dumping Via WER

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•0

Detects potential credential dumping via Windows Error Reporting LSASS Shtinkering technique which uses the Windows Error Reporting to dump lsass