Share And Session Enumeration Using Net.EXE (62510e69-616b-4078-b371-847da438cc03)
Detects attempts to enumerate file shares, printer shares and sessions using "net.exe" with the "view" flag.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Share And Session Enumeration Using Net.EXE (62510e69-616b-4078-b371-847da438cc03) | Sigma-Rules | Remote System Discovery - T1018 (e358d692-23c0-4a31-9eb6-ecc13a8d7735) | Attack Pattern | 1 |