CmdID

CmdID / Techniques / T1555

T1555.001 Credentials from Password Stores: Keychain

Adversaries may acquire credentials from Keychain. MITRE ATT&CK

1 Sigma rule T1555.001 on attack.mitre.org

Part of

MITRE ATT&CK

T1555Credentials from Password Stores

Sigma rules tagged with it

process creation, the highest levels first

mediumCredentials from Password Stores - KeychainTim Ismilyaev, oscd.community, Florian Roth (Nextron Systems) · macOS