Skip to content

Hide Navigation Hide TOC

PUA - SoftPerfect Netscan Execution (ca387a8e-1c84-4da3-9993-028b45342d30)

Detects usage of SoftPerfect's "netscan.exe". An application for scanning networks. It is actively used in-the-wild by threat actors to inspect and understand the network architecture of a victim.

Cluster A Galaxy A Cluster B Galaxy B Level
Network Service Discovery - T1046 (e3a12395-188d-4051-9a16-ea8e14d07b88) Attack Pattern PUA - SoftPerfect Netscan Execution (ca387a8e-1c84-4da3-9993-028b45342d30) Sigma-Rules 1