Hide Navigation Hide TOC Windows LAPS Credential Dump From Entra ID (a4b25073-8947-489c-a8dd-93b41c23f26d) Detects when an account dumps the LAPS password from Entra ID. Cluster A Galaxy A Cluster B Galaxy B Level Windows LAPS Credential Dump From Entra ID (a4b25073-8947-489c-a8dd-93b41c23f26d) Sigma-Rules Device Registration - T1098.005 (7decb26c-715c-40cf-b7e0-026f7d7cc215) Attack Pattern 1 Account Manipulation - T1098 (a10641f4-87b4-45a3-a906-92a149cb2c27) Attack Pattern Device Registration - T1098.005 (7decb26c-715c-40cf-b7e0-026f7d7cc215) Attack Pattern 2