A critical system process, C:\WINDOWS\system32\lsass.exe ... is responsible for security policy enforcing on Windows systems and it is used by the system to add entries to the security log ...