application_error | Detection.FYI

Microsoft Malware Protection Engine Crash

Aug 12, 2024 · attack.defense-evasion attack.t1211 attack.t1562.001 ·
Share on:

This rule detects a suspicious crash of the Microsoft Malware Protection Engine

Read More
Potential Credential Dumping Via WER - Application

Aug 12, 2024 · attack.credential-access attack.t1003.001 ·
Share on:

Detects Windows error reporting event where the process that crashed is lsass. This could be the cause of an intentional crash by techniques such as Lsass-Shtinkering to dump credential

Read More