Lsass Full Dump Request Via DumpType Registry Settings

심각도 높음 Sigma 탐지 룰. Detects the setting of the "DumpType" registry value to "2" which stands for a "Full Dump". Technique such as LSASS Shtinkering requires thi…

작성자: @pbssubhash · 원본 라이선스: DRL 1.1 · SigmaHQ 원본