S0121Windows

S0121Lslsass

Platforms
1
ATT&CK
14.1
References
2

Description

[Lslsass](https://attack.mitre.org/software/S0121) is a publicly-available tool that can dump active logon session password hashes from the lsass process. (Citation: Mandiant APT1) Documented platforms: Windows. Catalogued in ATT&CK 14.1. 2 references curated. Documented platforms: Windows. Catalogued in ATT&CK 14.1. 2 references curated.

Platforms· 1

Windows

References

  1. https://attack.mitre.org/software/S0121
  2. https://www.fireeye.com/content/dam/fireeye-www/services/pdfs/mandiant-apt1-report.pdf

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Software
Fgdump
Sub-technique
LSASS Memory
Software
gsecdump
Software
Cachedump
Software
ProcDump
Software
Pass-The-Hash Toolkit
Sourced from MITRE ATT&CK Enterprise 14.1. Curated by Adam Lundqvist, SQUR.