Time Travel Debugging Utility Usage - Image — Detection Rule

Detects usage of Time Travel Debugging Utility. Adversaries can execute malicious processes and dump processes, such as lsass.exe, via tttracer.exe.

Read the full analysis on IntelFusions