LSASS process not found about nanodump HOT 9 CLOSED

Hello! Are you running as admin?

from nanodump.

Hello :)
yes, also same user as the other VM

from nanodump.

try with
nanodump -w dump -p 728

from nanodump.

wow hidden command!

>nanodump.x64.exe -w dump -p 728
Failed to read LSASS, status: 0xc0000022

from nanodump.

haha that is the only hidden command, you can check if you don't trust me.
Looks like you can't read LSASS, that happens with some EDRs, in my experience, if you load nanodump as an SSP, it works on those cases.
I'm still trying to figure out how the manage to prevent you from reading LSASS

from nanodump.

It works thanks!
I'll let you know if I find out anything

from nanodump.

Awesome! I'm glad.
Out of curiosity, what EDR is it?

from nanodump.

Checkpoint, but I've also seen a similar behaviour with Sophos in the past

from nanodump.

Ok thanks, good to know.
I changed the error messages so this is easier to diagnose in the future: f718c2c
I'm closing this, thanks for letting me know, I will try to find out what is going on exactly and see if I can do anything about it.

from nanodump.