Credential Dumping Activity By Python Based Tool — Detection Rule
Detects LSASS process access for potential credential dumping by a Python-like tool such as LaZagne or Pypykatz.
Detects LSASS process access for potential credential dumping by a Python-like tool such as LaZagne or Pypykatz.