SAM database user credentials dump with Mimikatz

Detects scenarios where an attacker dump the LSASS memory content using Mimikatz (sekurlsa module).