Windows Internals

Glossary term

LSASS

Local Security Authority Subsystem Service, the protected process that enforces local security policy and authentication.

Where LSASS appears

beginner

Authentication & logon

How Windows turns credentials into authenticated sessions, security contexts, and usable access tokens.