Credential Dumping Tools Accessing LSASS Memory

Detects processes requesting access to LSASS memory via suspicious access masks. This is typical for credentials dumping tools