ConceptsLSASS
LSASS
The Windows process (Local Security Authority Subsystem Service) that handles authentication and holds credentials in memory, making it a prime target for attackers who dump its memory to steal credentials.
7 direct links2 lessons
Concept Neighborhood
Related · bigger circles cover more lessons
Start here
Process
The most substantial related concept here, covered by 6 lessons.
Relatedsorted by lesson coverage
ProcessStart here
6
lessons
LSASS Memory Dumping Detection
5
lessons
Lateral Movement
4
lessons
Credential Access
3
lessons
HKCU
3
lessons
Credential Dumping
1
lesson
Show 1 more connection
Related Lessons
2 lessons cover this conceptWindows Essentials for Defenders
General Beginner
Processes, Users, and the Idea of Security Context
General Beginner
Sign in to open lesson content directly.