Notepad Password Files Discovery — Detection Rule

Detects the execution of Notepad to open a file that has the string "password" which may indicate unauthorized access to credentials or suspicious activity.

Read the full analysis on IntelFusions