HackTool - Potential Remote Credential Dumping Activity Via CrackMapExec Or Impacket-Secretsdump

SigmaHQ Detections@sigmaHQ

•updated Jun 4, 2025•0•0•0

Detects default filenames output from the execution of CrackMapExec and Impacket-secretsdump against an endpoint.