CmdID

CmdID / Techniques / T1555

T1555.004 Credentials from Password Stores: Windows Credential Manager

Adversaries may acquire credentials from the Windows Credential Manager. MITRE ATT&CK

2 Sigma rules T1555.004 on attack.mitre.org

Part of

MITRE ATT&CK
T1555Credentials from Password Stores

Sigma rules tagged with it

process creation, the highest levels first
highSuspicious Key Manager AccessFlorian Roth (Nextron Systems) · Windows