Netskope Threat Labs

INDICATOR-COMPROMISE Win.Tool.WinPWN toolkit Get-ChromeDump download attempt

IPS-SWG

1 SID: 61347

Detects the WinPWN Windows attack toolkit, which bundles credential dumping and privilege escalation modules. Spotting these indicators early helps contain an intrusion before cyberattackers expand access.