Hide Navigation Hide TOC Impacket PsExec Execution (32d56ea1-417f-44ff-822b-882873f5f43b) Detects execution of Impacket's psexec.py. Cluster A Galaxy A Cluster B Galaxy B Level Impacket PsExec Execution (32d56ea1-417f-44ff-822b-882873f5f43b) Sigma-Rules SMB/Windows Admin Shares - T1021.002 (4f9ca633-15c5-463c-9724-bdcd54fde541) Attack Pattern 1 SMB/Windows Admin Shares - T1021.002 (4f9ca633-15c5-463c-9724-bdcd54fde541) Attack Pattern Remote Services - T1021 (54a649ff-439a-41a4-9856-8d144a2551ba) Attack Pattern 2