Query
[T1552.001] Microsoft Teams Unsecured Credentials In Files
LogScale · Detection & Monitoring · v1 · @sebastian · 24.7.2026
Detect process command lines referencing Microsoft Teams Cookies or Local Storage leveldb paths that may expose unsecured credentials, mapped to MITRE ATT&CK T1552.001.
DetectionEndpointWindows
Query contentv1
Download v1Loading editor…
Version history
Every save keeps the previous content. Open any version to view or download it.