" . $title . "
Threat (0 is low, 10 is high)
: Allows users to logon, launches shell and controls user access tokens.Status
: 'lsass.exe' is critical
Lsass.exe is the local security and authentication server system. It handles authentication of users from the Windows logon screen (the "Winlogon process") and generates user access tokens and launches explorer.exe (or any other defined shell). This process cannot be ended as it is a crucial system service.lsass.exe