attack.t1039 | Detection.FYI

Copy From Or To Admin Share Or Sysvol Folder

Aug 12, 2024 · attack.lateral-movement attack.collection attack.exfiltration attack.t1039 attack.t1048 attack.t1021.002 ·
Share on:

Detects a copy command or a copy utility execution to or from an Admin share or remote

Read More
Suspicious Access to Sensitive File Extensions

Aug 12, 2024 · attack.collection attack.t1039 ·
Share on:

Detects known sensitive file extensions accessed on a network share

Read More