Tool: Windows Credential Editor

Description

[Windows Credential Editor](https://attack.mitre.org/software/S0005) is a password dumping tool. (Citation: Amplia WCE)

External References

• mitre-attack
• Amplia WCE

Techniques Used by This Tool

• T1003.001 — LSASS Memory

APT Groups Using This Tool

• FIN6
• APT39
• BRONZE BUTLER
• Leviathan
• GALLIUM
• Threat Group-3390
• FIN5