TargetImage:\\lsass.exe (SourceImage:\\TrolleyExpress.exe OR SourceImage:\\ProcessDump.exe OR SourceImage:\\dump64.exe) (GrantedAccess:10 OR GrantedAccess:30 OR GrantedAccess:50 OR GrantedAccess:70 OR GrantedAccess:90 OR GrantedAccess:B0 OR GrantedAccess:D0 OR GrantedAccess:F0 OR GrantedAccess:18 OR GrantedAccess:38 OR GrantedAccess:58 OR GrantedAccess:78 OR GrantedAccess:98 OR GrantedAccess:B8 OR GrantedAccess:D8 OR GrantedAccess:F8 OR GrantedAccess:1A OR GrantedAccess:3A OR GrantedAccess:5A OR GrantedAccess:7A OR GrantedAccess:9A OR GrantedAccess:BA OR GrantedAccess:DA OR GrantedAccess:FA OR GrantedAccess:0x14C2 OR GrantedAccess:FF)