ATT&CK technique
View on MITRE ATT&CK →
T1552.002
Credentials in Registry
Credential Access
7 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| splunk | Auto Admin Logon Registry Entry | production | 2026-05-13 |
| splunk | Add DefaultUser And Password In Registry | production | 2026-05-13 |
| splunk | Windows Credentials in Registry Reg Query | production | 2026-05-13 |
| sigma | Registry Export of Third-Party Credentials | experimental | 2025-05-22 |
| sigma | Enumeration for 3rd Party Creds From CLI | test | 2025-05-22 |
| sigma | Enumeration for Credentials in Registry | test | 2022-12-25 |
| sigma | SAM Registry Hive Handle Request | test | 2021-11-27 |