Retour
-
Question
Lsass dump creation -
Description
we would like to confirm how the lsass dump is performed? If done via standard windows way, via werfault.exe, there are built-in mechanisms making sure that secrets are removed from the lsass dumps. -
Réponse
Change Auditor uses werfault.exe for the agent and client dumps.