Microsoft reckons Microsoft Defender is up to the task of detecting legit tools for credential dumping from lsass.exe memory. Cybersecurity: This is how Microsoft Defender ATP tackles password-stealing credential dumping attempts
Source: ZDNet Microsoft
