Detects the change of database master password. It may be a part of data exfiltration.
Read the full analysis on IntelFusions