Memdump Utility Execution
Detects the execution of 'memdump', a utility that captures physical or process memory, indicating potential memory scraping activity.
Microsoft Sentinel (KQL)

Detects the execution of 'memdump', a utility that captures physical or process memory, indicating potential memory scraping activity.

Already have an account?