Tag
medium
advisory
Remote Execution via File Shares
2 rules 2 TTPsThis rule identifies the execution of a file that was created by the virtual system process, potentially indicating lateral movement via network file shares in Windows environments.
lateral-movement
file-share
windows
2r
2t
medium
advisory
Remote Execution via File Shares
2 rules 1 TTPThis rule identifies potential lateral movement via network file shares by detecting the execution of a file that was created by the virtual system process.
Windows
lateral-movement
file-share
2r
1t