CmdID / Techniques / T1552
T1552.003 Unsecured Credentials: Shell History
Adversaries may search the command history on compromised systems for insecurely stored credentials. MITRE ATT&CK
1 Sigma rule T1552.003 on attack.mitre.org
Part of
T1552Unsecured Credentials