diff --git a/rules/windows/process_creation/proc_creation_win_susp_vaultcmd.yml b/rules/windows/process_creation/proc_creation_win_susp_vaultcmd.yml index 463d2b936..df9664b18 100644 --- a/rules/windows/process_creation/proc_creation_win_susp_vaultcmd.yml +++ b/rules/windows/process_creation/proc_creation_win_susp_vaultcmd.yml @@ -1,4 +1,4 @@ -title: Access Saved Credentials via VaultCmd +title: Windows Credential Manager Access via VaultCmd id: 58f50261-c53b-4c88-bd12-1d71f12eda4c status: experimental description: List credentials currently stored in Windows Credential Manager via the native Windows utility vaultcmd.exe