LSASS dumping
Named by 2 kept items in this workspace.
Search every workspace for LSASS dumping. It matches the name as written, so it can find other things that share it.
The items that name it 2
credential dumping from lsass.exe memory
credential dumping post-exploit technique; mentioned as out of scope for this bundle
All techniques in this workspace.