Living-off-the-land attacks are hard, but not impossible, to protect against
It’s not easy to detect and defend against attackers who can lurk in Windows systems, mimicking functions native to the operating system, but there are practical measures that will help thwart them.
Security Authority Subsystem Service Security Authority Local Security Authority Subsystem Service Protective Process Light Windows Defender Credential Guard Defender Credential Guard
Source: csoonline.com