Mimikatz malicious Security package (SSP) exfiltrates cleartext passwords in file

Detects scenarios where an attacker loaded the Mimikatz SSP "mimilib.dll" into the LSA process in order to exfiltrate clear text passwords into a file.