HackTool - HandleKatz Duplicating LSASS Handle
심각도 높음 Sigma 탐지 룰. Detects HandleKatz opening LSASS to duplicate its handle to later dump the memory without opening any new handles
작성자: Bhabesh Raj (rule), @thefLinkk · 원본 라이선스: DRL 1.1 · SigmaHQ 원본
심각도 높음 Sigma 탐지 룰. Detects HandleKatz opening LSASS to duplicate its handle to later dump the memory without opening any new handles
작성자: Bhabesh Raj (rule), @thefLinkk · 원본 라이선스: DRL 1.1 · SigmaHQ 원본