LSASS Access
-
OpenProcess(target: lsass.exe) -
MiniDumpWriteDump -
ReadProcessMemory
Token Theft
-
OpenProcessToken -
DuplicateTokenEx -
ImpersonateLoggedOnUser -
SetThreadToken
BLUE TEAM / MALWARE REVERSE / ANALYSIS / STATIC / DANGEROUS FUNCS / WIN32