Using built-in OS indexing features for credential hunting
infonews
security
Source: Embrace The RedJune 22, 2020
Summary
This article explains how to use built-in OS search features (Windows Search indexing and macOS Spotlight) to quickly hunt for credentials that may be stored in plain text on machines. Rather than manually searching through files, administrators and security teams can query the OS index via command line using PowerShell scripts on Windows or the mdfind command on macOS, which is much faster and can also search binary files.
Classification
Attack SophisticationModerate
Original source: https://embracethered.com/blog/posts/2020/invoke-windowssearch-credential-hunt/
First tracked: February 12, 2026 at 02:20 PM
Classified by LLM (prompt v3) · confidence: 95%