Crash Dump Created By Operating System (882fbe50-d8d7-4e29-ae80-0648a8556866)

Detects "BugCheck" errors indicating the system rebooted due to a crash, capturing the bugcheck code, dump file path, and report ID.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Crash Dump Created By Operating System (882fbe50-d8d7-4e29-ae80-0648a8556866)	Sigma-Rules	Data from Local System - T1005 (3c4a2599-71ee-4405-ba1e-0e28414b4bc5)	Attack Pattern	1
Crash Dump Created By Operating System (882fbe50-d8d7-4e29-ae80-0648a8556866)	Sigma-Rules	Security Account Manager - T1003.002 (1644e709-12d2-41e5-a60f-3470991f5011)	Attack Pattern	1
OS Credential Dumping - T1003 (0a3ead4e-6d47-4ccb-854c-a6a4f9d96b22)	Attack Pattern	Security Account Manager - T1003.002 (1644e709-12d2-41e5-a60f-3470991f5011)	Attack Pattern	2