Unusual access to SSH keys

Identifies access by unusual process to saved SSH keys.

• Platform: Windows
• Severity: High
• MITRE Tactic: Credential Access
• MITRE Techniques: T1552, T1552.001

Back to all rules