SniffPass network credential sniffer execution detected

Detects the execution of SniffPass, a known network password recovery tool often used by adversaries to capture passwords from various network protocols (e.g., POP3, IMAP, SMTP, FTP, and HTTP). The rule monitors process execution events for known SniffPass binary names and SHA256 hashes.