返回
-
问题
Lsass dump creation -
说明
we would like to confirm how the lsass dump is performed? If done via standard windows way, via werfault.exe, there are built-in mechanisms making sure that secrets are removed from the lsass dumps. -
回答
Change Auditor uses werfault.exe for the agent and client dumps.