LSASS Memory Access by Tool With Dump Keyword In Name
Detects LSASS process access requests from a source process with the dump keyword in its image name
YARA-L

Detects LSASS process access requests from a source process with the dump keyword in its image name

Already have an account?