CmdID

CmdID / Techniques / T1555

T1555.003 Credentials from Password Stores: Credentials from Web Browsers

Adversaries may acquire credentials from web browsers by reading files specific to the target browser. MITRE ATT&CK

4 Sigma rules T1555.003 on attack.mitre.org

Part of

MITRE ATT&CK
T1555Credentials from Password Stores

Sigma rules tagged with it

process creation, the highest levels first
highHackTool - WinPwn ExecutionSwachchhanda Shrawan Poudel · Windows
mediumPotential Browser Data StealingNasreddine Bencherchali (Nextron Systems) · Windows
mediumPUA - WebBrowserPassView Executionfrack113 · Windows