ATT&CK technique
View on MITRE ATT&CK →
T1552.003
Shell History
Credential Access
4 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| splunk | Linux Shell History Access Via Command Line Utility | production | 2026-07-08 |
| sigma | Cisco Show Commands Input | test | 2023-01-04 |
| sigma | Suspicious History File Operations - Linux | test | 2022-11-28 |
| sigma | Suspicious History File Operations | test | 2021-11-27 |