Linux Proc Memory Credential Harvesting
Detects reading of process memory via /proc filesystem for credential extraction
Microsoft Sentinel (KQL)

Detects reading of process memory via /proc filesystem for credential extraction

Already have an account?