Skip to content

Hide Navigation Hide TOC

Writing Local Admin Share (4aafb0fa-bff5-4b9d-b99e-8093e659c65f)

Aversaries may use to interact with a remote network share using Server Message Block (SMB). This technique is used by post-exploitation frameworks.

Cluster A Galaxy A Cluster B Galaxy B Level
Writing Local Admin Share (4aafb0fa-bff5-4b9d-b99e-8093e659c65f) Sigma-Rules Screensaver - T1546.002 (ce4b7013-640e-48a9-b501-d0025a95f4bf) Attack Pattern 1
Event Triggered Execution - T1546 (b6301b64-ef57-4cce-bb0b-77026f14a8db) Attack Pattern Screensaver - T1546.002 (ce4b7013-640e-48a9-b501-d0025a95f4bf) Attack Pattern 2