5 published detections cite this
Citing it, not covering it: each of these was written with this as evidence, and carries the source it came from and the licence it was published under.
| Detection | Severity |
|---|---|
| Full User-Mode Dumps Enabled System-Wide | Medium |
| Lsass Full Dump Request Via DumpType Registry Settings | High |
| Potential Credential Dumping Via WER | High |
| LSASS Process Dump Artefact In CrashDumps Folder | High |
| LSASS Process Crashed - Application | High |
Showing 5 of 5