TIE LSASS Memory

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Content Index

---

Searches for OS Credentials dumping attacks.

Attribute	Value
Type	Analytic Rule
Solution	Tenable App
ID	7851f57c-98b6-43c6-9747-9bb7cf11f21c
Severity	High
Kind	Scheduled
Tactics	CredentialAccess
Techniques	T1003.001
Required Connectors	TenableIE
Source	View on GitHub

Tables Used

This content item queries data from the following tables:

Table	Transformations	Ingestion API	Lake-Only
Tenable_IE_CL	?	✓	?
Tenable_ad_CL	?	✓	?

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Analytic Rules · Back to Tenable App