Suspicious Credential Discovery Execution

nomit vyas@xoxo

•updated Feb 19, 2026•0•58

Detects execution of suspicious tools or commands that may indicate credential or secret discovery. Generic detection for processes attempting to enumerate credentials, secrets, or sensitive information across files, repositories, or environments.