LSASS

Named by 4 kept items in this workspace.

2 items name it under affected products and 2 under classification.technologies.

Search every workspace for LSASS. It matches the name as written, so it can find other things that share it.

The items that name it 4

Field Notes: Reconstructing the Attacker's LSASS Dump
writeupas affected products2026-09-30It is written here as LSASS (Local Security Authority Subsystem Service).
Memory dumped by attacker using TrickDump; reconstructed dump contained reusable credential material including Kerberos keys for an affected account (username: prtg)
The Closed Quorum: Inside the First Reported Autonomous AI C2 Implant
writeupas affected products2026-09-22It is written here as LSASS (Windows).
Domain/local credentials dumped from memory via lsassDump()
Mimikatz Missing Manual
repoas classification.technologies2026-07-31
Kernel Drivers, Process Protection, and ...Bears?
writeupas classification.technologies2023-08-22

All technologies in this workspace.