HackTool - HandleKatz Duplicating LSASS Handle — Detection Rule

Detects HandleKatz opening LSASS to duplicate its handle to later dump the memory without opening any new handles