ATT&CK technique
View on MITRE ATT&CK →
T1003.007
Proc Filesystem
Credential Access
5 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Suspicious /proc/maps Discovery | production | 2026-10-09 |
| elastic | Linux init (PID 1) Secret Dump via GDB | production | 2026-09-18 |
| elastic | Linux Process Hooking via GDB | production | 2026-09-18 |
| elastic | Manual Memory Dumping via Proc Filesystem | production | 2026-09-18 |
| elastic | Potential Linux Credential Dumping via Proc Filesystem | production | 2026-09-18 |