<<< Hide Navigation Hide TOC >>>
HackTool - SafetyKatz Execution (b1876533-4ed5-4a83-90f3-b8645840a413)
Detects the execution of the hacktool SafetyKatz via PE information and default Image name
Cluster A![]() |
Galaxy A![]() |
Cluster B![]() |
Galaxy B![]() |
Level![]() |
---|---|---|---|---|
LSASS Memory - T1003.001 (65f2d882-3f41-4d48-8a06-29af77ec9f90) | Attack Pattern | HackTool - SafetyKatz Execution (b1876533-4ed5-4a83-90f3-b8645840a413) | Sigma-Rules | 1 |
LSASS Memory - T1003.001 (65f2d882-3f41-4d48-8a06-29af77ec9f90) | Attack Pattern | OS Credential Dumping - T1003 (0a3ead4e-6d47-4ccb-854c-a6a4f9d96b22) | Attack Pattern | 2 |