Windows Credential Dump via comsvcs MiniDump
Detects abuse of comsvcs.dll MiniDump export to dump LSASS or other process memory for credential access.
Sigma

Detects abuse of comsvcs.dll MiniDump export to dump LSASS or other process memory for credential access.

Already have an account?