Notepad Password Files Discovery (3b4e950b-a3ea-44d3-877e-432071990709)
Detects the execution of Notepad to open a file that has the string "password" which may indicate unauthorized access to credentials or suspicious activity.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Notepad Password Files Discovery (3b4e950b-a3ea-44d3-877e-432071990709) | Sigma-Rules | File and Directory Discovery - T1083 (7bc57495-ea59-4380-be31-a64af124ef18) | Attack Pattern | 1 |