Potential Credential Dumping Activity Via LSASS

심각도 보통 Sigma 탐지 룰. Detects process access requests to the LSASS process with specific call trace calls and access masks. This behaviour is expressed by many cr…

작성자: Samir Bousseaden, Michael Haag · 원본 라이선스: DRL 1.1 · SigmaHQ 원본