Attack.t1552.006 - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/tags/attack.t1552.006/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 10 Nov 2026 02:50:09 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgLSASS Process Reconnaissance Via Findstr.EXEhttps://feed.craftedsignal.io/briefs/2026-11-lsass-recon-findstr/Tue, 10 Nov 2026 02:50:09 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-lsass-recon-findstr/Detection of findstr or find commands that include the keyword lsass, which indicates reconnaissance activity for the LSASS process PID.highadvisoryattack.credential-accessattack.t1552.006