Renamed CreateDump Utility Execution

Google SecOps@GoogleSecOps

•updated Jun 6, 2025•0•0•0

Detects uses of a renamed legitimate createdump.exe LOLOBIN utility to dump process memory