Potential Password Reconnaissance Via Findstr.EXE

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•1•0•23

Detects command line usage of "findstr.exe" to search for keywords related to "passwords" in various languages. This activity can indicate an adversary attempting to locate credentials stored in files on a compromised system.