Potential Credential Dumping Via LSASS Process Clone

심각도 치명 Sigma 탐지 룰. Detects a suspicious LSASS process process clone that could be a sign of credential dumping activity

작성자: Florian Roth (Nextron Systems), Samir Bousseaden · 원본 라이선스: DRL 1.1 · SigmaHQ 원본