Hide Navigation Hide TOC Copying Sensitive Files with Credential Data (e7be6119-fc37-43f0-ad4f-1f3f99be2f9f) Files with well-known filenames (sensitive files with credential data) copying Cluster A Galaxy A Cluster B Galaxy B Level Copying Sensitive Files with Credential Data (e7be6119-fc37-43f0-ad4f-1f3f99be2f9f) Sigma-Rules NTDS - T1003.003 (edf91964-b26e-4b4a-9600-ccacd7d7df24) Attack Pattern 1 Copying Sensitive Files with Credential Data (e7be6119-fc37-43f0-ad4f-1f3f99be2f9f) Sigma-Rules Security Account Manager - T1003.002 (1644e709-12d2-41e5-a60f-3470991f5011) Attack Pattern 1 OS Credential Dumping - T1003 (0a3ead4e-6d47-4ccb-854c-a6a4f9d96b22) Attack Pattern NTDS - T1003.003 (edf91964-b26e-4b4a-9600-ccacd7d7df24) Attack Pattern 2 OS Credential Dumping - T1003 (0a3ead4e-6d47-4ccb-854c-a6a4f9d96b22) Attack Pattern Security Account Manager - T1003.002 (1644e709-12d2-41e5-a60f-3470991f5011) Attack Pattern 2