attack.s0039 | Detection.FYI

Net.exe Execution
Feb 21, 2023 · attack.discovery attack.t1007 attack.t1049 attack.t1018 attack.t1135 attack.t1201 attack.t1069.001 attack.t1069.002 attack.t1087.001 attack.t1087.002 attack.lateral_movement attack.t1021.002 attack.s0039 ·
Share on:
Detects execution of Net.exe, whether suspicious or benign.

Read More
Reconnaissance Activity
Feb 1, 2023 · attack.discovery attack.t1087.002 attack.t1069.002 attack.s0039 ·
Share on:
Detects activity as "net user administrator /domain" and "net group domain admins /domain"

Read More