Secretdump password dumping via SMB admin share
Detects scenarios where an attacker execute Secretdump in order to remotely dump credentials over SMB.
Sigma

Detects scenarios where an attacker execute Secretdump in order to remotely dump credentials over SMB.

Already have an account?