Notepad Password Files Discovery

SigmaHQ Detections@sigmaHQ

•updated Mar 4, 2025•1•0•2

Detects the execution of Notepad to open a file that has the string "password" which may indicate unauthorized access to credentials or suspicious activity.