Flow-based Playbooks › Security Incident Response playbooks › Playbook Resources › Security Incident Response › Enterprise security case management applications › Security Operations

Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Playbook for T1003 - Detect Credential Dumping Tools

This playbook provides systematic remediation steps to investigate an incident involving credential dumping activities.

Set up the T1003 - Detect Credential Dumping Tools playbook
Use the following steps to set up the T1003 - Detect Credential Dumping Tools playbook.
Use the T1003 - Detect Credential Dumping Tools playbook
Use this playbook to investigate an incident involving credential dumping activities. The following steps give you a walkthrough of the actions, tasks, and subflows that are available in the T1003 - Detect Credential Dumping Tools playbook.

Parent Topic:Flow-based Playbooks