File access to SAM database

Identifies access to the Security Account Manager on-disk database.

• Platform: Windows
• Severity: High
• MITRE Tactic: Credential Access
• MITRE Techniques: T1003, T1003.002

Back to all rules