CyberStack

MITRE ATT&CK / Software / S0121

Lslsass

ID
S0121
Type
Tool
Platforms
Windows
Source
attack.mitre.org
MITRE last modified
25 Apr 2025

Lslsass is a publicly-available tool that can dump active logon session password hashes from the lsass process. [1]

Techniques used (1)

Groups using it (1)

References

  1. Mandiant APT1