Credentials from Password Stores - Keychain — Detection Rule

Detects passwords dumps from Keychain

Read the full analysis on IntelFusions