Microsoft IIS Service Account Password Dumped
Detects the Internet Information Services (IIS) command-line tool, AppCmd, being used to list passwords
Sigma

Detects the Internet Information Services (IIS) command-line tool, AppCmd, being used to list passwords

Already have an account?