All Detections

macOS ClickFix Password Validation via DSCL

avatar
Ankit Mehta@Secvyn
updated Jun 30, 2026001

Detects local password validation using dscl . -authonly, a technique observed in ClickFix credential theft workflows.

Microsoft Sentinel (KQL)