1 rule found for "Sherif Eldeeb"
Detects process access requests to LSASS process with potentially suspicious access flags