Credentials In Files - Linux — Detection Rule

Detecting attempts to extract passwords with grep

Read the full analysis on IntelFusions