Tag
Adversaries may perform credential dumping by spawning a clone of the Local Security Authority Subsystem Service (LSASS) process.