HackTool - SafetyKatz Execution

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•14

Detects the execution of the hacktool SafetyKatz, which is used for credential dumping, by identifying its executable name, original file name, or description in process creation events.