GIFTEDCROOK Stealer Accessing KeePass Database Files (.kdbx)
Detects access or modification attempts to KeePass (.kdbx) password database files by processes other than authorized KeePass applications. This behavior often indicates an attempt to exfiltrate or crack credential stores.
Cortex XDR
