HackTool - CrackMapExec Execution Patterns (058f4380-962d-40a5-afce-50207d36d7e2)

Detects various execution patterns of the CrackMapExec pentesting framework

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Windows Command Shell - T1059.003 (d1fcf083-a721-4223-aedf-bf8960798d62)	Attack Pattern	HackTool - CrackMapExec Execution Patterns (058f4380-962d-40a5-afce-50207d36d7e2)	Sigma-Rules	1
Scheduled Task/Job - T1053 (35dd844a-b219-4e2b-a6bb-efa9a75995a9)	Attack Pattern	HackTool - CrackMapExec Execution Patterns (058f4380-962d-40a5-afce-50207d36d7e2)	Sigma-Rules	1
Windows Management Instrumentation - T1047 (01a5a209-b94c-450b-b7f9-946497d91055)	Attack Pattern	HackTool - CrackMapExec Execution Patterns (058f4380-962d-40a5-afce-50207d36d7e2)	Sigma-Rules	1
PowerShell - T1059.001 (970a3432-3237-47ad-bcca-7d8cbb217736)	Attack Pattern	HackTool - CrackMapExec Execution Patterns (058f4380-962d-40a5-afce-50207d36d7e2)	Sigma-Rules	1
Windows Command Shell - T1059.003 (d1fcf083-a721-4223-aedf-bf8960798d62)	Attack Pattern	Command and Scripting Interpreter - T1059 (7385dfaf-6886-4229-9ecd-6fd678040830)	Attack Pattern	2
Command and Scripting Interpreter - T1059 (7385dfaf-6886-4229-9ecd-6fd678040830)	Attack Pattern	PowerShell - T1059.001 (970a3432-3237-47ad-bcca-7d8cbb217736)	Attack Pattern	2