admin/CompassSecurity-PowerLsassSilentProcessExit
1
0
Fork 0
mirror of https://github.com/CompassSecurity/PowerLsassSilentProcessExit synced 2026-06-21 13:42:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

Typo in README

Browse Source
This commit is contained in:
Sylvain Heiniger
2021-07-01 17:02:33 +02:00
committed by GitHub
parent 60ce4dcc75
commit 0f0c51cb0e
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+1 -1
View File
@@ -30,7 +30,7 @@ The powershell.exe process gets dumped along with lsass using the DumpMode 0, he
## Monitoring Guidance
The (original article)[https://www.deepinstinct.com/2021/02/16/lsass-memory-dumps-are-stealthier-than-ever-before-part-2/] provides some pointers on how to detect this technique. From our point of view, the following two techniques are best to detect our script being run:
The [original article](https://www.deepinstinct.com/2021/02/16/lsass-memory-dumps-are-stealthier-than-ever-before-part-2/) provides some pointers on how to detect this technique. From our point of view, the following two techniques are best to detect our script being run:
### Monitoring Registry