I came across a file, that was used by our tech support, to store all generic usernames and passwords in them for use with new systems. (Our company has been trained on the use of other Password storage tools, so this isn't a matter of training. The problem is that these files now exist on our network from before the team was trained. Generic accounts are already planned on being phased out as well.)
I noted this to our CISO and we have been trying to come up with a good solution as to how we can identify similar files in our network. We figured that since we have access to AD, we can probably search through all user accounts to find all instances of the first file. The problem is not necessarily what we know, but what we don't know. We want to make sure we find any instances of files used as password repositories. Are there any tools, open source or proprietary, that would accomplish this goal?