@starfrost @yogthos Yeah, I'm worried about that as well. The first thing the vendors will do is to rename the file/process to lssass.exe or lsasss.exe or such. 😒