The Local Security Authority Subsystem Service (LSASS) process is responsible for managing the local system policy, user authentication, and auditing while it also handled sensitive security data ...

It is using predictable memory reads that credential theft tools create from the Local Security Authority Subsystem Service (lsass.exe) process to thwart lateral movement in a victim's network.