@inproceedings {259703, author = {Patrick Ah-Fat and Michael Huth and Rob Mead and Tim Burrell and Joshua Neil}, title = {Effective Detection of Credential Thefts from Windows Memory: Learning Access Behaviours to Local Security Authority Subsystem Service}, booktitle = {23rd International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2020)}, year = {2020}, isbn = {978-1-939133-18-2}, address = {San Sebastian}, pages = {181--194}, url = {https://www.usenix.org/conference/raid2020/presentation/ah-fat}, publisher = {USENIX Association}, month = oct }