It’s all in the details: The curious case of an lsass dumper gone undetected

https://dec0ne.github.io/research/2022-11-14-Undetected-Lsass-Dump-Workflow/