home/categories/computational-chemistry/mukul975-anthropic-cybersecurity-skills-skills-detecting-t1003-credential-dumping-with-edr-skill-md
computational-chemistryresearch

detecting-t1003-credential-dumping-with-edr

Detect OS credential dumping techniques targeting LSASS memory, SAM database, NTDS.dit, and cached credentials using EDR telemetry, Sysmon process access monitoring, and Windows security event correlation.

mukul975
maintainer
mukul975
更新于 4/6/2026
星标
4240
分支
464
quick start

Installation and usage

Detect OS credential dumping techniques targeting LSASS memory, SAM database, NTDS.dit, and cached credentials using EDR telemetry, Sysmon process access monitoring, and Windows security event correlation.

安装
$ install --globalskills.sh
使用

安装后,您可以通过在终端运行以下命令来使用此技能:

skills use detecting-t1003-credential-dumping-with-edr