Fsutil Drive Enumeration (63de06b9-a385-40b5-8b32-73f2b9ef84b6)
Attackers may leverage fsutil to enumerated connected drives.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Fsutil Drive Enumeration (63de06b9-a385-40b5-8b32-73f2b9ef84b6) | Sigma-Rules | Peripheral Device Discovery - T1120 (348f1eef-964b-4eb6-bb53-69b3dcb0c643) | Attack Pattern | 1 |