Detections
Analytics

LSA Protection

Information

For Windows 11 version 22H2 and beyond a new setting is used to configure this. IT can be located at 'System\Local Security Authority\Configures LSASS to run as a protected process' which provides additional configuration options. Enable LSA protection. For more information see http://technet.microsoft.com/en-us/library/dn408187.aspx

Solution

Policy Path: MS Security Guide
Policy Setting Name: LSA Protection

See Also

https://techcommunity.microsoft.com/blog/microsoft-security-baselines/windows-11-version-25h2-security-baseline/4456231

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-7

Plugin: Windows

Control ID: 1abd06d9cadd6a11b8b40d3a66f18fafa6e79b93dcbc487525ce56983f12fad2