Skip to content

Hide Navigation Hide TOC

Windows Internet Hosted WebDav Share Mount Via Net.EXE (7e6237fe-3ddb-438f-9381-9bf9de5af8d0)

Detects when an internet hosted webdav share is mounted using the "net.exe" utility

Cluster A Galaxy A Cluster B Galaxy B Level
SMB/Windows Admin Shares - T1021.002 (4f9ca633-15c5-463c-9724-bdcd54fde541) Attack Pattern Windows Internet Hosted WebDav Share Mount Via Net.EXE (7e6237fe-3ddb-438f-9381-9bf9de5af8d0) Sigma-Rules 1
SMB/Windows Admin Shares - T1021.002 (4f9ca633-15c5-463c-9724-bdcd54fde541) Attack Pattern Remote Services - T1021 (54a649ff-439a-41a4-9856-8d144a2551ba) Attack Pattern 2