Potentially Suspicious GrantedAccess Flags On LSASS — Detection Rule

Detects process access requests to LSASS process with potentially suspicious access flags

Read the full analysis on IntelFusions