Q18
Single choice
An incident in Cortex XSIAM displays alerts for "Lsass Memory Dump" originating from a process named proc_dump.exe. The process is unsigned, has an unknown reputation, and was launched from a temporary directory.
Which initial verdict applies to this incident?