home/categories/computational-chemistry/mukul975-anthropic-cybersecurity-skills-skills-detecting-t1003-credential-dumping-with-edr-skill-md
computational-chemistryresearch

detecting-t1003-credential-dumping-with-edr

Detect OS credential dumping techniques targeting LSASS memory, SAM database, NTDS.dit, and cached credentials using EDR telemetry, Sysmon process access monitoring, and Windows security event correlation.

mukul975
maintainer
mukul975
Обновлено 4/6/2026
Звёзды
4240
Форки
464
quick start

Installation and usage

Detect OS credential dumping techniques targeting LSASS memory, SAM database, NTDS.dit, and cached credentials using EDR telemetry, Sysmon process access monitoring, and Windows security event correlation.

Установка
$ install --globalskills.sh
Использование

После установки вы можете использовать этот skill, выполнив следующую команду в терминале:

skills use detecting-t1003-credential-dumping-with-edr