Tenable.ad LSASS Memory

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


Searches for OS Credentials dumping attacks.

Attribute Value
Type Analytic Rule
Solution TenableAD
ID 6f7fa5f9-7d21-42c1-bc52-ac355b87c6cf
Severity High
Kind Scheduled
Tactics CredentialAccess
Techniques T1003.001
Required Connectors Tenable.ad
Source View on GitHub

⚠️ Not listed in Solution JSON: This content item was discovered by scanning the solution folder but is not included in the official Solution JSON file. It may be a legacy item, under development, or excluded from the official solution package.

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
Tenable_IE_CL ? ?
Tenable_ad_CL ? ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules · Back to TenableAD