Tool

github.com/deepinstinct/Lsass-Shtinkering

https://github.com/deepinstinct/Lsass-Shtinkering
Published on
github.com
Sources in this catalogue
2

ATT&CK techniques those detections carry

  • T1003.001LSASS Memory
  • T1003OS Credential Dumping
  • T1112Modify Registry
Open the original

5 published detections cite this

Citing it, not covering it: each of these was written with this as evidence, and carries the source it came from and the licence it was published under.

Detections citing this reference
DetectionSeverity
Full User-Mode Dumps Enabled System-WideMedium
Lsass Full Dump Request Via DumpType Registry SettingsHigh
Potential Credential Dumping Via WERHigh
LSASS Process Dump Artefact In CrashDumps FolderHigh
LSASS Process Crashed - ApplicationHigh

Detections can measure how the public catalogue is used — which detections people look for, and which pages bring them here. It sets a cookie that recognises this browser for 180 days. It is never linked to an account and never follows you to other sites. Privacy notice