Hide Navigation Hide TOC

Microsoft Teams Sensitive File Access By Uncommon Applications (65744385-8541-44a6-8630-ffc824d7d4cc)

Detects file access attempts to sensitive Microsoft teams files (leveldb, cookies) by an uncommon process.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Steal Application Access Token - T1528 (890c9858-598c-401d-a4d5-c67ebcdd703a)	Attack Pattern	Microsoft Teams Sensitive File Access By Uncommon Applications (65744385-8541-44a6-8630-ffc824d7d4cc)	Sigma-Rules	1