ATT&CKReferencesPicus Labs Proc cump 2022

Picus Labs Proc cump 2022

Huseyin Can YUCEEL & Picus Labs. (2022, March 22). Retrieved March 31, 2023.

Open the source

Techniques1

Groups0

None recorded.

Software0

None recorded.

Campaigns0

None recorded.

Procedure examples2

TechniqueUsed byProcedure example
T1003.007
Proc Filesystem
ToolMimiPenguin

MimiPenguin can use the `<PID>/maps` and `<PID>/mem` file to search for regex patterns and dump the process memory.

T1003.007
Proc Filesystem
ToolLaZagne

LaZagne can use the `<PID>/maps` and `<PID>/mem` files to identify regex patterns to dump cleartext passwords from the browser's process memory.

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.