S0121 · Lslsass · Sunturai

toolenterprise-attackS0121

Lslsass

tool--2fab555f-7664-4623-b4e0-1675ae38190b

Lslsass is a publicly-available tool that can dump active logon session password hashes from the lsass process. (Citation: Mandiant APT1)

External references

mitre-attackS0121Open reference

Platforms

Windows

Kill chain phases

Only techniques sit in a kill chain phase.

Relationships

Incoming and outgoing edges in the selected ATT&CK release.

S0121 · Lslsass · Sunturai