creates, lists, and deletes stored user names and passwords or credentials.
cmdkey /list
List cached credentials
Get credential information from host
C:\Windows\System32\cmdkey.exe, C:\Windows\SysWOW64\cmdkey.exe
Sigma: https://github.com/SigmaHQ/sigma/blob/62d4fd26b05f4d81973e7c8e80d7c1a0c6a29d0e/rules/windows/process_creation/proc_creation_win_cmdkey_recon.yml