LSASS Process Memory Dump Files (a5a2d357-1ab8-4675-a967-ef9990a59391)
Detects creation of files with names used by different memory dumping tools to create a memory dump of the LSASS process memory, which contains user credentials.
Detects creation of files with names used by different memory dumping tools to create a memory dump of the LSASS process memory, which contains user credentials.