Skip to content

Hide Navigation Hide TOC

Detect unauthorized LSASS driver persistence via LSA plugin abuse (Windows) - DET0225 (fbac07bf-65d5-4222-88bb-0ef798417ebb)

None

Cluster A Galaxy A Cluster B Galaxy B Level
Analytic 0629 - AN0629 (5028303d-22d6-490c-b053-015e877d5829) Analytics Detect unauthorized LSASS driver persistence via LSA plugin abuse (Windows) - DET0225 (fbac07bf-65d5-4222-88bb-0ef798417ebb) Detection Strategies 1
Detect unauthorized LSASS driver persistence via LSA plugin abuse (Windows) - DET0225 (fbac07bf-65d5-4222-88bb-0ef798417ebb) Detection Strategies LSASS Driver - T1547.008 (f0589bc3-a6ae-425a-a3d5-5659bfee07f4) Attack Pattern 1
LSASS Driver - T1547.008 (f0589bc3-a6ae-425a-a3d5-5659bfee07f4) Attack Pattern Boot or Logon Autostart Execution - T1547 (1ecb2399-e8ba-4f6b-8ba7-5c27d49405cf) Attack Pattern 2