Attention MDR Customers: New Case Submission Flow

As of March 18, 2025, there is an updated process flow to submit MDR-related cases. Please visit this article for details.

Welcome to the future of Business Support! I'm Trend Companion, your AI assistant ready to streamline your experience.

Log in for your personalized support! Chat with Trend Companion for quick answers, or submit a case for detailed troubleshooting.

Views:

To resolve this, upgrade to at least Deep Security version 12.0.1655 or 20.0.0-2419.
Behavior Monitoring pattern should be at least 235100/235164.

Deep Security Behavior Monitoring is not detecting credential dumping (lsaas.exe)

Deep SecurityAll

Last updated: 2021/08/28

Solution ID: KA-0012096

Category: Troubleshoot

When performing credential dumping, Behavior Monitoring is not detecting it. This issue is caused by username string matching.

To resolve this, upgrade to at least Deep Security version 12.0.1655 or 20.0.0-2419.
Behavior Monitoring pattern should be at least 235100/235164.

Was this article helpful?