Hide Navigation Hide TOC DLL Load via LSASS (b3503044-60ce-4bf4-bbcb-e3db98788823) Detects a method to load DLL via LSASS process using an undocumented Registry key Cluster A Galaxy A Cluster B Galaxy B Level LSASS Driver - T1547.008 (f0589bc3-a6ae-425a-a3d5-5659bfee07f4) Attack Pattern DLL Load via LSASS (b3503044-60ce-4bf4-bbcb-e3db98788823) Sigma-Rules 1 LSASS Driver - T1547.008 (f0589bc3-a6ae-425a-a3d5-5659bfee07f4) Attack Pattern Boot or Logon Autostart Execution - T1547 (1ecb2399-e8ba-4f6b-8ba7-5c27d49405cf) Attack Pattern 2