T1552.001 Credentials In Files

Named by 2 kept items in this workspace.

Search every workspace for T1552.001 Credentials In Files. It matches the name as written, so it can find other things that share it.

The items that name it 2

LiteLLM PyPI Package and Docker Images Compromised to Steal Cloud and AI Credentials
writeup2026-10-21It is written here as T1552.001 - Credentials In Files.
GhostAction Attack Escalates By Targeting GitHub Users
writeup2026-10-09It is written here as T1552.001 Credentials In Files (Credential Access).
Credential Access

All techniques in this workspace.