Tool: Lslsass

Description

[Lslsass](https://attack.mitre.org/software/S0121) is a publicly-available tool that can dump active logon session password hashes from the lsass process. (Citation: Mandiant APT1)

External References

• mitre-attack
• Mandiant APT1

Techniques Used by This Tool

• T1003.001 — LSASS Memory

APT Groups Using This Tool

• APT1