Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
ATT&CK technique

T1555.005

Password Managers

Credential Access 4 detections found
View on MITRE ATT&CK →

Detection rules

Source Rule Status Updated
splunk Windows Password Managers Discovery production 2026-10-06
splunk Linux Auditd Find Credentials From Password Managers production 2026-05-13
splunk Linux Auditd Find Credentials From Password Stores production 2026-05-13
sigma Remote Thread Created In KeePass.EXE test 2023-05-05