Skip to content
Threat Feed

Tag

Threat_detection

1 brief RSS
high advisory

Suspicious Execution from WebDAV Share

This rule detects attempts to execute content from remote WebDAV shares, where attackers may abuse WebDAV paths, public tunnels, or host@port UNC paths to execute tools or scripts, reducing local staging on the victim's file system.

Windows +5 execution webdav threat_detection
2r 1t