Potential Credential Dumping Via LSASS Process Clone — Detection Rule
Detects a suspicious LSASS process process clone that could be a sign of credential dumping activity
Detects a suspicious LSASS process process clone that could be a sign of credential dumping activity