LSASS Process Dump Artefact In CrashDumps Folder

심각도 높음 Sigma 탐지 룰. Detects the presence of an LSASS dump file in the "CrashDumps" folder. This could be a sign of LSASS credential dumping. Techniques such as …

작성자: @pbssubhash · 원본 라이선스: DRL 1.1 · SigmaHQ 원본