Remote Thread Created In KeePass.EXE (77564cc2-7382-438b-a7f6-395c2ae53b9a)

Detects remote thread creation in "KeePass.exe" which could indicates potential password dumping activity

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Remote Thread Created In KeePass.EXE (77564cc2-7382-438b-a7f6-395c2ae53b9a)	Sigma-Rules	Password Managers - T1555.005 (315f51f0-6b03-4c1e-bfb2-84740afb8e21)	Attack Pattern	1
Credentials from Password Stores - T1555 (3fc9b85a-2862-4363-a64d-d692e3ffbee0)	Attack Pattern	Password Managers - T1555.005 (315f51f0-6b03-4c1e-bfb2-84740afb8e21)	Attack Pattern	2