HackTool - Pypykatz Credentials Dumping Activity

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•0•1

Detects the usage of "pypykatz" to obtain stored credentials. Adversaries may attempt to extract credential material from the Security Account Manager (SAM) database through Windows registry where the SAM database is stored