Playbook for T1003 - Detect Credential Dumping Tools

This playbook provides systematic remediation steps to investigate an incident involving credential dumping activities.

• Set up the T1003 - Detect Credential Dumping Tools playbook
  Use the following steps to set up the T1003 - Detect Credential Dumping Tools playbook.
• Use the T1003 - Detect Credential Dumping Tools playbook
  Use this playbook to investigate an incident involving credential dumping activities. The following steps give you a walkthrough of the actions, tasks, and subflows that are available in the T1003 - Detect Credential Dumping Tools playbook.