Suspicious access to Windows Vault files

Identifies attempts from adversaries to acquire credentials from Vault files.

• Platform: Windows
• Severity: High
• MITRE Tactic: Credential Access
• MITRE Techniques: T1555, T1555.004

Back to all rules