Weak or Abused Passwords In CLI

SigmaHQ Detections@sigmaHQ

•updated Apr 28, 2026•0•0•3

Detects weak passwords or often abused passwords (seen used by threat actors) via the CLI. An example would be a threat actor creating a new user via the net command and providing the password inline