name: Access LSASS Memory for Dump Creation Deployment
id: 974c422f-db3f-4538-8f2a-ee5bf8eec0fa
date: '2021-01-13'
author: Patrick Bareiss
description: Example for a deployment for a specific Detection
scheduling:
  cron_schedule: 0 * * * *
  earliest_time: -30m@m
  latest_time: now
  schedule_window: auto
alert_action:
  notable:
    rule_description: '%description%'
    rule_title: '%name% Notable'
    nes_fields:
    - dest
tags:
  detection_name: Access LSASS Memory for Dump Creation
