VeeamBackup Database Credentials Dump Via Sqlcmd.EXE (b57ba453-b384-4ab9-9f40-1038086b4e53)
Detects dump of credentials in VeeamBackup dbo
Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
---|---|---|---|---|
Data from Local System - T1005 (3c4a2599-71ee-4405-ba1e-0e28414b4bc5) | Attack Pattern | VeeamBackup Database Credentials Dump Via Sqlcmd.EXE (b57ba453-b384-4ab9-9f40-1038086b4e53) | Sigma-Rules | 1 |