All Detections

New Generic Credentials Added Via Cmdkey.EXE

Yamato Security Hayabusa@YamatoSecurityHayabusa
updated Jun 24, 2025015

Detects usage of "cmdkey.exe" to add generic credentials. As an example, this can be used before connecting to an RDP session via command line interface.

Sigma