Linux Grep for Passwords in Files

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•1•0•35

This rule detects attempts to extract passwords from files on Linux systems using the 'grep' command. It specifically looks for executions of 'grep' in conjunction with the keyword 'password', indicating a potential search for credentials.