Netskope Threat Labs

INDICATOR-COMPROMISE Responder poisoner toolkit download attempt

IPS-SWG

1 SID: 50096

First seen
January 2022
Last seen
October 2026

Detects activity tied to the Responder credential capture toolkit operating on the network. Spotting these indicators early helps contain an intrusion before cyberattackers expand access.