Password Dumper Remote Thread in LSASS

심각도 높음 Sigma 탐지 룰. Detects password dumper activity by monitoring remote thread creation EventID 8 in combination with the lsass.exe process as TargetImage. Th…

작성자: Thomas Patzke · 원본 라이선스: DRL 1.1 · SigmaHQ 원본