
WindowsMemPageDelta
A Microsoft Windows service to provide telemetry on Windows executable memory page changes to facilitate threat detection
anomaly-detectiondefensive-toolslog-analysis+1
33

A Microsoft Windows service to provide telemetry on Windows executable memory page changes to facilitate threat detection

Blue-team lab: detecting & mitigating CVE-2025-24054 (Windows NTLM hash disclosure) with Sysmon, Wazuh SIEM, and Group Policy