Docker CLI login to ACR using -p password flag from CLI-enumerated credentials

Emiliano Mema@Nosalva

•updated Jul 16, 2026•2•0•9

Detects 'docker login' commands targeting an Azure Container Registry (.azurecr.io) that explicitly include username and password flags in the command line string. This behavior may indicate credential usage for registry authentication.