Process memory dump/MiniDumpWriteDump targeting Chrome for SDS extraction
Detects use of process-dumping utilities (procdump) or the rundll32 comsvcs.dll MiniDump technique invoked against chrome.exe, consistent with an unprivileged process reading browser process memory to extract the passkey Security Domain Secret (SDS) master key (Golden Pass-ta-key attack).
Microsoft Sentinel (KQL)
