credentialtheftprocdumpcomsvcs-manageengine2024

0001-01-01

Credential Theft Using Procdump or Comsvcs

ManageEngine 2024

https://www.manageengine.com/log-management/correlation-rules/credential-theft-using-procdump-comsvcs.html

Notes
Local Security Authority Subsystem (LSASS)
lateral movement
credential dumping
procdump
comsvcs - comsvcs.dll
Sysinternals
principle of least privilege

Links to this note

Recent Posts