DET0633 Detection of Credentials from Password Store

Technique Detected: T1634 (Credentials from Password Store)

Analytics

iOS

AN1705

Application vetting services may be able to detect known privilege escalation exploits contained within applications, as well as searching application packages for strings that correlate to known password store locations. Mobile security products can potentially detect jailbroken devices.

Log Sources

Mutable Elements