Recon Credential Theft CISA Report

Google SecOps@GoogleSecOps

•updated Jun 2, 2025•0•0•0

Detects suspicious credential access commands as identified in CISA Living off the Land pdf. Alone they may be normal but in concert, they may be worth looking into