Suspicious access to Windows Credential Manager files

Identifies suspicious processes trying to acquire credentials from the Windows Credential Manager.

• Platform: Windows
• Severity: High
• MITRE Tactic: Credential Access
• MITRE Techniques: T1555, T1555.004

Back to all rules