From 0f0c51cb0ec0811920db51b6f43430a3dc93fa3e Mon Sep 17 00:00:00 2001 From: Sylvain Heiniger Date: Thu, 1 Jul 2021 17:02:33 +0200 Subject: [PATCH] Typo in README --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index c2e6415..68517fb 100644 --- a/README.md +++ b/README.md @@ -30,7 +30,7 @@ The powershell.exe process gets dumped along with lsass using the DumpMode 0, he ## Monitoring Guidance -The (original article)[https://www.deepinstinct.com/2021/02/16/lsass-memory-dumps-are-stealthier-than-ever-before-part-2/] provides some pointers on how to detect this technique. From our point of view, the following two techniques are best to detect our script being run: +The [original article](https://www.deepinstinct.com/2021/02/16/lsass-memory-dumps-are-stealthier-than-ever-before-part-2/) provides some pointers on how to detect this technique. From our point of view, the following two techniques are best to detect our script being run: ### Monitoring Registry