LogScale Queries

Query

[T1552.001] Microsoft Teams Unsecured Credentials In Files

LogScale · Detection & Monitoring · v1 · @sebastian · 24.7.2026

All Queries

Detect process command lines referencing Microsoft Teams Cookies or Local Storage leveldb paths that may expose unsecured credentials, mapped to MITRE ATT&CK T1552.001.

DetectionEndpointWindows

Query contentv1

Download v1
Loading editor…

Version history

Every save keeps the previous content. Open any version to view or download it.

  1. v1current

    24.7.2026, 17:12:32