LSASS Memory Access by Tool With Dump Keyword In Name — Detection Rule
Detects LSASS process access requests from a source process with the "dump" keyword in its image name.
Detects LSASS process access requests from a source process with the "dump" keyword in its image name.