Potential Reconnaissance For Cached Credentials Via Cmdkey.EXE (07f8bdc2-c9b3-472a-9817-5a670b872f53)

Detects usage of cmdkey to look for cached credentials on the system

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Cached Domain Credentials - T1003.005 (6add2ab5-2711-4e9d-87c8-7a0be8531530)	Attack Pattern	Potential Reconnaissance For Cached Credentials Via Cmdkey.EXE (07f8bdc2-c9b3-472a-9817-5a670b872f53)	Sigma-Rules	1
Cached Domain Credentials - T1003.005 (6add2ab5-2711-4e9d-87c8-7a0be8531530)	Attack Pattern	OS Credential Dumping - T1003 (0a3ead4e-6d47-4ccb-854c-a6a4f9d96b22)	Attack Pattern	2