Ciberseguridad desde Málaga · Redes, anzuelos y amenazas

← Amenazas
Técnica MITRE ATT&CK · Acceso a credenciales

T1003.001 LSASS Memory

Subtécnica de T1003 OS Credential Dumping

Adversaries may attempt to access credential material stored in the process memory of the Local Security Authority Subsystem Service (LSASS). After a user logs on, the system generates and stores a variety of credential materials in LSASS process memory. These credential materials can be harvested by an administrative user or SYSTEM and used to conduct [Lateral…

Ficha en MITRE ATT&CK ↗

Quién la usa · con noticias en Jábega

Reglas Sigma para cazarla

Mostrando 25 de 40.

Reglas de SigmaHQ · Detection Rule License 1.1. Técnica de MITRE ATT&CK®.