attack.t1039 | Detection.FYI

Copy from Admin Share
Feb 4, 2023 · attack.lateral_movement attack.collection attack.exfiltration attack.t1039 attack.t1048 attack.t1021.002 ·
Share on:
Detects a suspicious copy command to or from an Admin share or remote

Read More
Suspicious Access to Sensitive File Extensions
Dec 27, 2022 · attack.collection attack.t1039 ·
Share on:
Detects known sensitive file extensions accessed on a network share

Read More