Local Security Authority Subsystem Service (LSASS)
GPTKB entity
Statements (24)
| Predicate | Object |
|---|---|
| gptkbp:instanceOf |
Process
|
| gptkbp:abbreviation |
gptkb:LSASS
|
| gptkbp:category |
gptkb:security
|
| gptkbp:criticalFor |
true
|
| gptkbp:developedBy |
gptkb:Microsoft
|
| gptkbp:executableName |
lsass.exe
|
| gptkbp:firstAppearance |
gptkb:Windows_NT
|
| gptkbp:function |
creates access tokens
enforces security policy on Windows systems handles user logins manages password changes verifies users for local and remote logins writes security logs |
| https://www.w3.org/2000/01/rdf-schema#label |
Local Security Authority Subsystem Service (LSASS)
|
| gptkbp:operatingSystem |
gptkb:Microsoft_Windows
|
| gptkbp:relatedTo |
gptkb:Kerberos
gptkb:Active_Directory gptkb:NTLM Windows authentication |
| gptkbp:runsOn |
SYSTEM
|
| gptkbp:target |
credential dumping attacks
|
| gptkbp:bfsParent |
gptkb:Security_Accounts_Manager_(SAM)
gptkb:SAM_(Security_Accounts_Manager) |
| gptkbp:bfsLayer |
7
|